Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: 7oq4YDyrwF5dXcvcBD76hTuMB/UstnKVuGGKR0O/Mxc=
Subject key identifier: 70:96:05:67:E0:33:AF:6F:64:E6:AF:0D:BD:2E:A4:F1:27:BC:F2:AA
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 019A4C6134131CC937A2CF961DF3E7B96F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 042C
Signing time: Tue 04 Nov 2025 01:00:29 +0000
Manifest this update: Tue 04 Nov 2025 01:00:29 +0000
Manifest next update: Wed 05 Nov 2025 01:00:29 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: btZokBCl7UGVyzBRfkT4mjDDrAedD1DnNhDCw5JGFa4=)
3: mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa (hash: SRjDoFDtCZGIa81wKDyuCO8n9PzLXPSishWYuw7XCOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:34:13:1c:c9:37:a2:cf:96:1d:f3:e7:b9:6f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Nov 4 01:00:29 2025 GMT
Not After : Nov 5 01:00:29 2025 GMT
Subject: CN=70960567e033af6f64e6af0dbd2ea4f127bcf2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:eb:8f:b1:9d:75:ae:64:fc:d6:95:2c:a4:
ed:ee:3a:47:67:6e:56:46:aa:57:0f:10:82:80:75:
ce:5c:f6:ae:b0:8a:8d:c9:6e:99:ce:1f:97:61:0e:
27:51:e7:c6:fc:d7:72:0b:26:da:71:73:50:17:d8:
36:e8:93:9b:ca:bd:6c:e1:85:bf:f9:2a:b9:33:45:
30:1b:35:4a:8e:9d:51:05:da:b2:69:63:49:65:bf:
24:43:d9:32:ca:41:bf:34:10:69:07:90:2a:07:c0:
41:94:88:05:91:5c:c1:3a:c4:45:84:28:7e:52:1d:
06:99:39:be:d9:65:17:0a:69:dd:63:1e:ea:4f:3b:
eb:e4:a9:ac:d7:09:0f:99:78:0f:87:fc:83:ab:fb:
fe:06:53:87:00:92:e1:1a:46:76:9b:7f:d7:58:fb:
49:5a:9a:60:02:3b:1d:33:cf:5c:f1:df:a8:11:9f:
f0:bb:5f:8e:ae:52:69:82:6b:1e:10:e8:de:f9:b6:
65:2c:a3:2a:bd:9b:ba:e6:97:2e:74:3a:9e:18:df:
54:2e:4e:c9:38:f0:89:e5:85:1b:b6:93:ca:f6:b7:
fa:07:cc:e2:e8:5d:24:3b:49:1f:a9:ea:7d:c7:d8:
cf:67:4a:3f:05:1e:c6:4f:9f:03:03:87:03:38:b5:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:05:67:E0:33:AF:6F:64:E6:AF:0D:BD:2E:A4:F1:27:BC:F2:AA
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:75:e6:d5:e3:b0:8e:e4:9b:e9:aa:af:9e:cf:1e:ff:ee:
6e:fd:b1:48:c4:33:c4:a9:26:eb:42:85:03:a9:e9:5a:4c:98:
5f:78:6f:70:89:17:6b:58:2b:b1:c7:1b:96:07:b2:58:0c:c6:
1d:e9:c3:ea:08:2f:7a:52:52:b1:66:5b:ab:b2:8f:c6:37:90:
9f:41:aa:15:5f:67:73:3e:00:c8:ba:06:9b:05:4c:30:01:df:
db:c0:d5:24:96:55:8b:c9:81:a9:66:b6:53:f0:38:ac:0e:6f:
22:70:08:34:78:6f:fd:06:97:3b:1b:94:97:aa:25:fd:78:70:
ce:45:0b:ce:63:22:27:a3:a8:83:14:e2:5f:7c:fa:80:24:ee:
88:0f:bd:e8:5b:2f:33:4a:36:07:4f:34:02:3c:5b:6a:15:a4:
94:6e:1c:7a:73:90:eb:d2:7e:e7:f3:7c:26:80:e4:8c:32:1a:
b8:78:58:78:9d:c2:3c:ee:02:98:fb:de:34:ac:13:57:19:c4:
56:91:66:07:3a:cb:9c:75:34:16:f8:e7:72:84:f3:4c:4a:71:
99:a2:42:c6:f6:03:8b:bb:db:11:c2:fe:03:8c:9b:9e:af:dc:
86:23:95:db:97:f1:5d:28:b8:97:e8:c4:44:e9:ce:61:fc:f6:
6c:2e:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:45 2025 by rpki-client