Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: jIW6+v4jaB4IwDBAVH4s7JXSdEd+LtMrPCkoAtdk1LY=
Subject key identifier: 8A:3F:AF:B3:89:E0:E7:F7:7A:DC:7B:E6:68:86:0D:BC:1F:1E:62:20
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019A4F2B74EF9E266A3CBFBE4E0DA3DBE9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 037C
Signing time: Tue 04 Nov 2025 14:00:39 +0000
Manifest this update: Tue 04 Nov 2025 14:00:39 +0000
Manifest next update: Wed 05 Nov 2025 14:00:39 +0000
Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: mHa3ze8L28Si+cJ0HBI2gorXoGFopsGNLa1z6tPSJjU=)
3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=)
4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=)
5: yTZK16Petp2vOn3txInnKgFuPZA.roa (hash: f4X49bz3pXDeDuy49E2fyjRi845LCJEWL2iDzuqzg38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:74:ef:9e:26:6a:3c:bf:be:4e:0d:a3:db:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Nov 5 14:00:39 2025 GMT
Subject: CN=8a3fafb389e0e7f77adc7be668860dbc1f1e6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:65:19:64:92:d7:1b:c7:79:98:e8:ee:9c:
40:f1:11:27:90:63:29:5e:91:10:ea:85:43:6e:f4:
31:2b:16:e9:28:8d:20:39:a3:7a:91:ee:e0:6d:7f:
e8:df:67:75:5b:22:7b:ea:d5:35:bf:b2:25:be:d1:
69:8b:a9:2f:75:57:c7:e9:ee:e6:58:36:13:79:11:
43:38:5b:28:f7:f2:d7:8c:66:1b:cc:e3:22:1d:ea:
2b:87:67:32:db:a1:24:6c:40:da:a5:b3:a7:a9:4d:
71:5c:16:bd:60:75:fa:38:67:80:e0:ea:4f:b4:22:
27:34:7b:07:6d:d2:97:84:bb:a4:f0:b9:9a:c4:22:
31:60:76:7e:5d:d2:e2:2f:7b:1b:06:3a:11:41:3c:
2a:88:5e:cf:62:0f:c2:0d:d8:02:2c:ee:e9:25:59:
86:4a:ca:95:dd:68:7b:d3:fc:20:0b:29:e1:ce:3d:
17:c4:1d:63:23:f2:d1:95:b9:9e:c6:9a:90:af:f3:
56:a5:ce:27:14:a5:58:ed:ef:8c:70:c8:76:e5:97:
88:aa:4f:93:94:f2:da:f4:80:8f:d1:d2:4a:42:4d:
b4:be:25:0c:7e:b2:b3:5a:7f:ec:2b:8a:57:b3:07:
8d:79:9f:bc:9a:39:01:e7:00:5d:e2:09:20:d5:d8:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:AF:B3:89:E0:E7:F7:7A:DC:7B:E6:68:86:0D:BC:1F:1E:62:20
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6a:21:0c:d5:2e:c6:ae:ec:cb:83:a8:7b:df:81:ae:55:9c:
34:10:83:64:49:cb:c3:8f:7c:5c:1b:59:31:58:78:cd:d1:92:
64:7b:15:8a:13:eb:50:d1:34:8b:d6:1f:c1:fc:b0:8b:40:f6:
77:a2:1c:2f:ea:ce:b3:67:eb:5f:69:17:b2:95:ca:92:27:6d:
59:ef:92:ce:7f:15:08:3e:ee:de:6a:9b:61:7e:a2:52:84:6b:
95:ca:70:1d:eb:06:9d:5b:70:d7:0a:e1:d8:4c:2d:3b:cd:ba:
3f:2b:c9:de:f6:82:d3:2d:84:83:45:74:fa:4b:fa:c8:cf:eb:
81:96:da:59:e6:9c:18:54:bb:7f:76:35:3e:ba:a4:4d:a2:f0:
d7:e4:90:f8:ba:d6:5d:99:82:61:7c:f2:d3:e8:09:cb:ef:54:
02:b8:84:1f:2e:ab:14:a3:3f:f2:7c:73:4c:62:08:2e:16:73:
db:d9:bd:de:d6:03:20:6c:36:1b:42:47:d8:e3:00:d6:13:1f:
86:59:69:ec:76:c1:d5:d9:f5:7c:a9:ea:3e:7b:14:8c:62:7d:
1d:d6:11:27:62:c6:55:71:ad:1f:02:f0:31:71:b6:b3:52:e9:
f2:fc:2e:ef:4b:ca:6b:13:4a:94:b2:b2:48:68:09:2f:45:45:
1c:03:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:38 2025 by rpki-client