Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: fm5RkiZBO1FqeOVRbkQzBhH19Ynz8Rw+rAgH2c8r+Z0=
Subject key identifier: 11:3F:9F:A6:AE:D2:79:E2:1C:4B:69:8A:E4:65:00:FD:30:44:E8:21
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019A4D3D15A872C6B7F10C851F65C94DDA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0DB8
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: KPMcEENLi+gDMUI1ePcHFNOlaSH8DBsd3Vhao2pVms4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:15:a8:72:c6:b7:f1:0c:85:1f:65:c9:4d:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=113f9fa6aed279e21c4b698ae46500fd3044e821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:36:01:e7:b6:e9:15:8f:a8:64:ed:f7:8d:
a2:33:74:66:09:32:50:e5:14:58:9b:a8:03:f9:d7:
10:cb:3b:e2:ef:b6:5b:0f:c6:9f:05:70:0c:ce:c7:
21:f2:c6:aa:ee:ad:c4:3c:39:e3:f9:66:0a:7e:00:
94:61:74:71:7c:79:72:57:36:32:1f:43:39:3f:e2:
03:0d:bf:0d:cb:9a:ea:80:2c:69:5c:90:e1:8f:37:
3b:bd:f4:a1:ac:e7:f6:96:f5:a4:c9:c3:2f:18:0a:
89:21:a5:8a:07:59:9d:1f:08:c9:ed:e8:22:e1:e2:
4e:31:a7:71:ef:d8:18:23:a1:7f:22:72:8a:fc:e5:
ad:57:c1:6f:17:37:a3:8f:a9:b1:3e:bd:86:39:33:
04:b6:fe:e5:a1:15:30:5b:44:ef:0c:f0:6a:c3:34:
5c:04:a8:b0:94:a6:7c:8c:b8:af:f3:2b:4e:1f:7c:
9d:dc:46:66:ff:ca:f7:8d:c3:f7:1d:dd:bb:e6:9d:
48:50:36:a9:57:f2:9b:37:56:0d:ca:67:4b:dd:62:
0e:51:dc:99:f0:8c:65:00:7d:57:d5:6a:de:7a:e2:
9e:fe:85:7f:20:4e:61:a1:50:d6:d8:a0:b3:5d:8e:
fb:0b:95:a3:27:e6:4e:01:8b:17:e4:1f:4d:50:a9:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3F:9F:A6:AE:D2:79:E2:1C:4B:69:8A:E4:65:00:FD:30:44:E8:21
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:28:4d:27:bf:e6:44:af:02:68:f4:4d:eb:0f:cc:53:c6:
93:f9:52:b4:e4:2a:13:7c:e6:26:c1:4b:b5:e2:2b:35:5b:67:
e9:cb:65:d0:71:45:33:11:eb:bf:91:3b:95:ae:8f:6f:a9:0c:
2f:d2:f4:47:df:6a:50:dc:2b:0a:6e:8b:da:08:9a:df:91:4b:
96:fb:ad:a7:7c:d8:d5:97:20:1a:e7:67:44:dc:41:cb:3d:a1:
05:ed:4b:16:c3:03:11:58:1b:4c:0c:9d:76:bb:1c:6f:c4:67:
46:e4:3e:80:e3:08:19:14:ed:c3:98:34:d5:8c:e3:db:86:3d:
73:14:08:3d:6d:be:b1:81:38:80:8e:4f:00:82:5f:ff:d8:09:
87:ac:45:88:29:5c:74:ce:db:84:4c:d7:ca:d0:14:b4:af:0f:
ac:91:52:fc:d4:37:7a:a3:76:9d:c3:b0:19:e6:25:3a:7b:0e:
40:7d:c3:dd:2b:ee:e1:22:dd:fb:b4:d4:1d:c4:e6:88:97:89:
89:54:53:4d:6c:92:b7:00:af:d3:9f:19:cc:44:28:c6:d1:2b:
5b:37:7c:93:ed:5e:3c:6c:eb:78:9e:5b:1d:2d:34:09:6e:d9:
a8:3a:d9:8c:9d:9e:5e:87:cb:8d:e6:6d:35:32:f5:91:23:bb:
b2:ec:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:12 2025 by rpki-client