Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File: LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier: KUk9ndYL70Za7uWRUoPj/ZIU/8Vg+8XMbR+xVfVi1qU=
Subject key identifier: D8:A2:AD:FE:D5:7E:77:B6:B7:E4:44:1D:1E:D0:06:96:7C:E0:BC:DE
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019A533EC9EFE2535B6C47416143CAED653F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number: 40
Signing time: Wed 05 Nov 2025 09:00:15 +0000
Manifest this update: Wed 05 Nov 2025 09:00:15 +0000
Manifest next update: Thu 06 Nov 2025 09:00:15 +0000
Files and hashes: 1: 8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa (hash: dTWrB7/Bcq7TMpdoMtRKk5plCZVXL7i81JXpAEWqK4g=)
2: 9WhKoBtA9w1RuKedqOS6XFmsO3I.roa (hash: CbHe2gPopFpWls+9aZrP72edEhK5Goer7R+Ctk2HNZY=)
3: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: XyMYi5To4Z/Yw5OZX7+Jg2u+eTrTZB4SM92cr8HjcEA=)
4: TleCnyfGdZ_mECH_iBY0pup0z6g.roa (hash: HrmWALEujgW08ieMDEygOWdRlqfGF9a1VyxcNiVM0Vg=)
5: cs2tcig_htwGIdVMlsEbECr1KUs.roa (hash: Ltjte90H2AR0ZhY5ZboX1HAAoGLfM6x2vjLJ6VTAc2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:c9:ef:e2:53:5b:6c:47:41:61:43:ca:ed:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Nov 5 09:00:15 2025 GMT
Not After : Nov 6 09:00:15 2025 GMT
Subject: CN=d8a2adfed57e77b6b7e4441d1ed006967ce0bcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:2e:25:c8:00:a8:6e:cb:1e:2f:7b:54:50:
1d:11:42:0f:97:a5:12:ee:59:ee:d6:d1:d4:8b:e7:
64:0a:9b:4e:96:24:8a:fe:8a:c9:2d:c3:ee:50:8f:
15:6c:23:0d:f8:ba:b9:f0:43:a8:8a:69:07:08:de:
92:be:19:f5:3b:13:f5:8f:72:c0:25:30:e2:50:39:
73:08:6c:89:87:3b:2a:b4:8c:e1:8b:c6:50:a9:d6:
28:2d:81:83:a2:a3:da:f3:50:e0:08:45:65:40:e1:
07:30:12:fa:67:e6:38:5d:9e:47:ec:10:92:0f:bd:
a4:82:8e:fc:01:d7:fd:60:e7:00:aa:93:18:6d:75:
13:17:be:f7:e0:05:00:17:b7:82:27:34:bc:32:8e:
ef:f2:3e:13:77:b0:bb:3b:6e:a0:07:93:59:39:4f:
91:12:d1:16:0a:c2:79:78:a3:dd:e0:10:64:76:92:
66:c0:c5:91:b2:fa:d1:1b:e9:c2:2e:71:89:1d:d3:
b0:ca:33:23:13:27:74:56:6f:f4:cf:df:5a:29:d4:
8a:06:17:53:db:5c:a2:d4:3d:bd:1f:c4:a1:9a:6d:
68:00:9a:e8:51:0f:9a:41:31:db:0a:6d:82:13:83:
44:8e:9f:22:3d:fd:89:96:94:4f:41:6b:dc:cd:aa:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:AD:FE:D5:7E:77:B6:B7:E4:44:1D:1E:D0:06:96:7C:E0:BC:DE
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bc:32:a4:5f:80:67:b8:1c:3b:df:21:d8:4a:5a:a6:80:68:
df:12:80:97:69:8a:7d:9d:ae:7f:3e:93:8e:65:84:72:7a:0d:
bf:99:4f:6b:76:be:16:c4:fa:b6:b0:83:f6:79:f1:be:05:30:
1d:46:94:99:aa:58:47:92:8a:be:ba:93:af:38:26:0e:3c:40:
55:94:9e:8f:12:f9:05:30:e9:bb:77:99:e6:5c:37:34:c1:48:
cc:df:e8:26:74:3c:07:80:3d:3c:0e:b9:77:60:1b:49:cb:7b:
f0:08:f9:17:ab:5f:d9:64:34:53:f1:b9:54:5d:ef:27:83:f5:
0f:29:ae:78:46:f1:ad:18:99:8a:73:57:69:7d:6e:1c:59:db:
a3:04:9e:ad:c4:e8:ee:67:ad:c1:1c:1b:ac:d1:68:a4:39:44:
3d:eb:55:68:c8:82:70:27:80:9b:f7:7c:58:17:f3:ed:20:5b:
14:15:31:e8:a0:d6:91:99:c6:3d:4b:f8:59:2e:f1:63:b4:75:
b2:57:d6:27:ce:04:48:51:20:3d:5d:2f:17:15:76:eb:61:1d:
bb:20:69:c2:8a:22:34:9b:c3:b8:69:ed:64:dc:45:e2:b3:83:
51:b8:07:37:42:5e:ec:44:a2:b6:6e:30:6b:91:64:b2:7a:1f:
01:7e:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:15 2025 by rpki-client