Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: 8NFsUn6+0wxYygfBlq64C55gvRWWJc68H+uPkOBv72s=
Subject key identifier: 00:E9:88:A9:19:09:6E:C9:DB:70:44:D6:B6:7E:30:2F:B6:D7:0A:8B
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 019A4E4FD4A44AE23C30E917FFD9C963ABD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 0587
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: Gd+twmGCdEtlNj27qDiaIRdCXRYzVX7tzDZzHIK/F6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d4:a4:4a:e2:3c:30:e9:17:ff:d9:c9:63:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=00e988a919096ec9db7044d6b67e302fb6d70a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:df:0e:d0:40:3f:f7:d6:a8:23:0e:d6:2b:
8b:72:1b:06:3f:70:55:b4:73:1e:35:21:4e:0a:38:
19:11:ea:a1:cb:b1:6c:cc:9d:f1:76:67:13:d0:1e:
1b:88:76:4b:a4:73:3c:b8:9c:aa:99:15:d7:95:8c:
a3:66:5a:5f:70:f6:46:de:78:7a:64:63:f2:ae:2e:
10:c4:4d:f2:61:62:0b:cf:ab:f8:aa:00:87:99:66:
c8:4c:dc:e1:ab:18:4f:ca:eb:78:d8:c5:f0:b3:43:
98:45:fe:b6:da:6e:39:94:97:32:2e:ef:6d:76:41:
19:34:94:a6:70:a3:21:71:dd:0f:0c:34:dc:a3:81:
e8:2b:2f:34:7b:20:94:91:a2:00:e6:a4:27:d4:be:
86:7d:20:63:73:aa:b8:5d:85:82:93:0d:29:ca:dc:
71:98:de:a7:fb:3f:8b:40:96:50:c0:53:8a:a5:cb:
0f:6f:80:82:e2:f6:60:86:64:f2:dd:62:1e:8c:5a:
3d:a0:70:4d:a0:24:d7:68:a1:ba:ae:22:0e:c2:55:
09:e9:5a:86:d5:f4:5f:f4:a4:99:13:a6:6e:ab:4f:
7e:0c:22:e7:3b:7a:27:71:0b:87:3e:86:77:eb:54:
d0:c3:c0:97:6e:62:26:b5:64:a1:0a:13:35:5e:cf:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:88:A9:19:09:6E:C9:DB:70:44:D6:B6:7E:30:2F:B6:D7:0A:8B
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:74:51:26:2e:aa:25:4b:8a:3d:52:fe:fb:6a:01:86:46:
72:ca:c5:5c:f3:26:18:06:9a:a4:7c:a3:5c:c9:36:7b:7b:1a:
d6:42:e8:e3:ce:df:63:a8:be:0e:2b:24:8f:09:9e:52:ac:b2:
4f:c2:71:ed:dd:45:0c:88:e6:13:a0:05:44:f8:9c:ee:b7:d9:
cf:5a:79:5b:7f:ba:7d:82:b8:61:51:5f:3c:c4:a8:4b:a0:7c:
53:1b:bc:ef:58:f2:52:5a:b7:af:1e:10:10:ab:7f:9e:e6:ca:
26:59:22:7a:c1:90:cd:67:65:df:da:bc:85:78:58:df:47:c2:
7b:88:9b:ba:2b:42:29:d2:b9:77:f9:4d:85:2d:68:24:f9:82:
ad:a4:78:45:7f:73:f0:9d:48:d4:72:fa:70:c0:dc:2a:8e:e5:
26:61:a6:2c:56:77:a1:f7:0c:6c:9b:77:dd:aa:95:76:fe:6d:
ea:92:73:b9:92:16:aa:02:60:bf:db:3b:70:91:98:78:fd:d1:
43:65:8a:4f:09:4f:32:c8:e7:e8:f8:c2:dd:36:ae:df:4d:bd:
9d:e8:da:a0:db:c9:d9:5a:3c:14:8d:b0:5a:c3:d9:d4:81:52:
ab:2a:b6:9c:de:c0:ec:cf:cb:1e:df:7b:8a:52:10:4a:89:74:
8f:fb:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:11 2025 by rpki-client