Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: 2CCu66n8KrN9Q2AyBb1rMekv+wocdYgCc+GPry590Ug=
Subject key identifier: C5:FB:42:F5:65:AC:79:BB:3B:FE:AC:71:B1:D8:1C:CB:EA:86:94:3F
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019A52D1E93D9779A9784CF64B156BC62370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 02A9
Signing time: Wed 05 Nov 2025 07:01:19 +0000
Manifest this update: Wed 05 Nov 2025 07:01:19 +0000
Manifest next update: Thu 06 Nov 2025 07:01:19 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: GaqpoXiEZNv9NGeT/mw2uhxXUKwCU1Ef55Jyxa1lk6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:e9:3d:97:79:a9:78:4c:f6:4b:15:6b:c6:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Nov 5 07:01:19 2025 GMT
Not After : Nov 6 07:01:19 2025 GMT
Subject: CN=c5fb42f565ac79bb3bfeac71b1d81ccbea86943f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:42:26:a3:fa:cf:79:2a:1a:73:bf:00:fb:
28:54:f7:71:f2:ca:a5:b1:e7:90:97:89:f5:f7:bd:
a2:10:c2:00:c9:7b:a7:ff:3c:fe:ca:9f:f5:94:40:
c6:f8:56:e5:9d:96:9a:4c:85:75:13:4d:08:86:be:
a0:ca:72:5c:35:58:f2:81:33:cf:cd:b2:a1:74:fe:
29:f6:c0:a4:30:83:79:39:7f:e7:20:dc:62:87:73:
c6:cd:bb:75:e6:4d:52:1d:c2:c4:84:28:24:1f:c5:
4f:9b:be:29:85:eb:db:30:ac:e8:1b:a8:0d:db:4e:
d0:c7:cb:bb:f2:fc:c2:ba:73:52:45:e3:c2:c2:2f:
c0:58:43:49:fe:f6:51:d8:5d:56:d8:4d:29:06:36:
61:ac:c0:33:ef:aa:18:19:9a:92:2d:fd:ec:89:1a:
f1:8e:f1:27:92:33:a9:80:6d:cb:6f:a3:88:ec:1d:
1e:93:af:16:a7:23:87:a1:9e:12:50:a8:a1:5b:c3:
78:25:d5:5d:a8:60:81:a6:d7:b6:9c:75:20:10:fd:
2c:db:34:91:3c:d3:e9:4f:18:1b:8c:87:54:f7:55:
71:87:53:27:9c:c5:dd:10:3f:b0:0d:17:bf:d9:dd:
50:d6:18:32:27:8e:89:9e:9a:a4:8b:9a:74:0b:1d:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:42:F5:65:AC:79:BB:3B:FE:AC:71:B1:D8:1C:CB:EA:86:94:3F
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:16:e1:a8:c3:a0:96:1c:4f:cc:91:d5:d9:b6:fb:2b:64:f7:
ff:27:02:06:4c:43:ad:dc:92:7b:0e:2a:05:c0:c2:92:68:58:
c9:ab:7d:47:ac:ce:72:17:66:67:c6:93:4a:91:12:78:86:d1:
dd:3b:0b:c6:1f:d2:45:d5:32:c4:d2:10:25:56:3d:83:61:8d:
36:89:6a:59:55:d2:22:f8:ab:94:82:4e:52:03:e1:81:84:42:
32:1d:91:fa:e8:d1:c8:3a:60:eb:7f:51:cb:6d:40:0a:b8:81:
2b:e0:70:64:31:0a:7e:0e:09:43:5e:a2:79:b7:cc:b0:cb:d2:
cf:6e:76:7e:57:3d:46:f3:8f:d4:76:6f:e3:92:41:6b:4b:0e:
f5:9b:12:23:cd:cb:16:6a:3d:de:a4:ea:51:71:8d:e8:21:6c:
dd:58:79:18:45:67:bc:a9:11:64:8b:e2:f1:d5:ab:52:8e:c8:
d4:62:82:47:e7:ac:25:21:60:ed:3e:fe:c5:f4:5f:d9:32:d6:
f0:a6:c8:c9:06:17:72:3d:1e:5e:8d:3f:b0:36:00:19:8d:36:
2d:18:26:f0:3e:db:ab:0e:82:d8:13:9f:51:c0:a2:0c:2a:b5:
c3:2c:93:3f:b5:57:67:25:82:0d:b3:89:9d:2f:76:41:b2:87:
e2:5f:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:51:49 2025 by rpki-client