Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: g7nOOa4OleHwBy/FWKiZif+NFhqSq2/+SZYBcd5CQrY=
Subject key identifier: 7F:52:6A:59:D7:16:63:C0:41:06:C2:0A:23:7A:1D:48:E5:34:8E:35
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019A5074F4834AC6249863CC35273F06611D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 20:00:33 +0000
Manifest this update: Tue 04 Nov 2025 20:00:33 +0000
Manifest next update: Wed 05 Nov 2025 20:00:33 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: z6Aawai9dYfG9glCMskgZxz8yPhSP4eBcnAgl+3p2E8=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f4:83:4a:c6:24:98:63:cc:35:27:3f:06:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Nov 4 20:00:33 2025 GMT
Not After : Nov 5 20:00:33 2025 GMT
Subject: CN=7f526a59d71663c04106c20a237a1d48e5348e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:18:b4:46:d2:a8:0b:c6:1e:1a:c0:fa:a6:
08:ec:d9:b9:a8:1d:39:14:71:d6:cd:2d:53:4b:7c:
6c:a3:fd:38:25:53:d2:03:0c:d2:ab:36:57:a9:5c:
af:29:17:b5:69:4b:70:c4:ea:99:5b:fd:1a:4b:32:
c2:2d:1a:b4:7b:1d:e6:a6:03:ad:6b:3b:fe:8d:09:
e1:2f:97:90:0e:b2:9a:cc:9c:a2:90:24:8a:11:8f:
96:76:e9:72:25:a0:47:a8:0c:7a:30:f3:8b:e6:06:
7a:02:44:10:90:eb:3f:b2:79:b4:d5:48:27:c2:1f:
62:2c:a4:cf:42:8a:80:7c:51:29:30:2a:12:6a:23:
c9:23:1a:f1:67:a3:28:7c:21:ba:58:a5:72:7c:48:
f8:5c:32:ed:20:e0:d4:34:de:76:c8:36:31:3f:eb:
aa:cd:26:ee:3e:26:b0:7f:53:2f:90:c0:b5:c0:0d:
aa:37:cf:7d:c6:62:61:79:da:83:18:98:69:5f:5b:
e3:ff:70:0a:a9:b8:b5:4b:75:ce:e7:28:da:0f:41:
03:e1:25:52:2e:e6:01:87:45:67:88:49:51:de:fc:
0c:fc:07:04:05:c3:bb:4d:ad:c9:7b:fe:6b:71:36:
9c:03:10:4f:57:fb:94:2a:ce:81:fa:09:3b:8d:e9:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:6A:59:D7:16:63:C0:41:06:C2:0A:23:7A:1D:48:E5:34:8E:35
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9e:ef:1f:90:07:33:ed:fa:12:88:9c:b5:b3:d7:a1:15:36:
cc:7b:d1:ae:a6:db:c0:34:1f:8a:6e:86:b5:f6:fe:fe:a8:4c:
5b:4d:c0:c8:ce:5c:29:ae:8a:48:94:22:3b:63:5a:cd:45:3a:
2d:1c:db:56:e1:87:c2:46:fa:85:de:06:55:d6:d5:49:5d:ea:
98:f0:20:1f:4c:23:d0:28:5b:6a:62:8a:32:7d:8b:60:09:56:
0d:d3:d4:fc:62:cf:d0:88:8c:b4:07:dd:83:70:3a:93:51:36:
8e:bf:75:17:82:82:47:23:39:83:9b:e7:22:df:d9:ca:08:25:
b8:8d:30:f8:7d:d4:91:09:3d:60:8f:f7:35:96:57:4b:6d:61:
60:1d:2e:2c:27:61:5b:81:0e:3e:81:f6:a7:89:86:2e:8c:95:
f4:5d:cc:fb:94:77:2a:0a:ac:9f:35:cd:a8:43:7f:e7:60:21:
2c:c1:ff:9f:0a:e1:48:7a:d8:c3:5d:23:db:98:95:40:e9:e5:
37:db:dc:66:69:ba:f0:2b:88:be:cb:13:32:08:27:2b:b7:e1:
cd:dc:fa:7e:67:a8:65:ab:90:01:08:33:14:a3:8b:b7:eb:27:
15:c0:34:7e:47:9f:d6:71:70:24:cb:97:df:29:34:01:6b:28:
49:10:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:48 2025 by rpki-client