Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: /T/xN3h5pR4K3JNSlUJWaakHV4QN3tK0iQj3FIjnRbg=
Subject key identifier: 98:9E:EF:33:38:2C:7B:3D:9B:67:A0:E3:2B:8E:8D:48:D2:21:70:D7
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019A4E4F714A8D9E8CF74FAA87AA99F7E518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:20 +0000
Manifest this update: Tue 04 Nov 2025 10:00:20 +0000
Manifest next update: Wed 05 Nov 2025 10:00:20 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: ZnWnZiPKP+/CCddfzFExf3xfLhksWqcNcjodDA3r3To=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:71:4a:8d:9e:8c:f7:4f:aa:87:aa:99:f7:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Nov 4 10:00:20 2025 GMT
Not After : Nov 5 10:00:20 2025 GMT
Subject: CN=989eef33382c7b3d9b67a0e32b8e8d48d22170d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:3d:60:3e:aa:ce:c6:d6:9b:5a:82:dd:83:
0f:02:37:09:3c:78:66:60:a6:f4:6f:90:6c:b0:f3:
e8:5c:85:33:23:5c:c5:34:19:2e:26:7a:c3:ba:9c:
7a:6f:99:5e:95:fe:70:e6:66:4a:57:43:33:fb:79:
d3:d1:a3:2b:cc:5b:8b:a8:62:13:36:27:b8:ae:19:
ff:81:88:ad:81:16:36:a0:f4:07:7c:f4:be:90:e0:
21:b4:4a:60:ea:67:e4:49:72:de:23:f4:7f:43:b2:
1a:c5:75:46:f1:59:29:69:1b:92:a4:81:fb:0b:60:
30:c7:fc:31:b3:b7:8a:b3:77:e4:39:f2:a7:cc:82:
15:01:14:43:ee:89:05:9a:77:5c:7e:67:2f:e5:7e:
41:19:ff:c3:05:fb:b4:9d:6a:a6:8a:46:b8:46:f2:
9c:f6:23:25:98:4e:28:4d:d0:e5:4d:7b:b0:ed:cc:
64:1f:e0:74:33:d6:cb:05:f6:43:b4:2d:53:b3:b7:
a6:ab:77:88:28:b2:66:48:6a:68:ca:9a:09:4e:5c:
e5:4d:43:50:0c:1b:ac:d6:82:5f:40:ed:97:f0:2b:
53:ff:0e:40:6c:aa:3e:f0:cc:db:cf:be:cd:cd:6d:
74:3c:92:93:8c:e5:5e:43:ee:e8:0c:e6:07:67:64:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:EF:33:38:2C:7B:3D:9B:67:A0:E3:2B:8E:8D:48:D2:21:70:D7
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f3:70:19:14:cb:5d:db:89:3c:b1:e3:92:76:d4:5e:c2:2d:
8a:0c:a6:9f:92:b9:ba:fa:e3:a6:3c:49:e1:45:93:bc:33:ab:
46:ec:4a:1c:29:65:03:15:a5:6a:75:c7:12:ec:cd:7d:65:76:
31:c9:e2:e4:9f:44:65:6a:27:64:01:ab:3e:e8:c3:18:df:f6:
bb:49:9a:18:2d:5d:97:3a:8d:82:c2:75:e3:d0:ee:fb:8e:9e:
41:d2:63:3b:1e:a1:58:0d:88:ab:45:db:b2:98:ca:cc:cc:5f:
4f:4f:8e:0c:f4:8e:94:9c:91:50:74:7a:b0:9b:70:df:87:74:
7d:a2:42:3e:ad:d1:2b:56:24:b1:36:d5:3c:13:69:16:8b:66:
61:89:7f:de:9e:36:78:0a:a6:d5:b8:f7:78:22:1b:bf:07:bd:
23:b0:6f:05:03:8d:ec:c2:f2:66:b1:be:93:3f:31:ea:75:4b:
a7:3b:13:2a:6b:fe:f5:00:04:8d:07:78:75:8f:03:53:cd:70:
22:ac:78:5f:bf:8d:6e:7f:27:73:c8:cd:88:a2:7d:f2:22:f1:
f1:87:10:6f:38:0c:f7:0d:c9:5e:73:92:2e:65:30:e7:30:c7:
23:d4:34:10:d3:82:ce:6b:52:16:0b:84:13:19:a7:f9:7a:94:
47:78:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:12 2025 by rpki-client