Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: apJWpfH8jAnEMx2Oh+e6cLfrla42xM2uXQ2uwFTjh3k=
Subject key identifier: F1:9D:84:0B:1A:8B:37:50:B4:52:F8:58:06:D4:3A:0B:81:31:14:EB
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 019A4EF561376C04098320EF4E890F943D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 03EE
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: c4Ed3b+ovluMCh+FOgCjZ7a8xkezlKRrqBhDoE7Td3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:61:37:6c:04:09:83:20:ef:4e:89:0f:94:3d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=f19d840b1a8b3750b452f85806d43a0b813114eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:f3:c0:ef:72:8b:54:4a:fe:0a:21:31:60:
7d:55:dd:80:cc:15:41:2d:ea:d5:dc:5a:09:2b:57:
0b:c2:90:a3:70:ba:fe:c2:38:8f:20:ae:77:30:98:
af:16:80:0b:5a:d9:ff:20:a3:6a:d6:ae:c6:32:a9:
f9:f8:9c:67:8a:b4:fa:2f:75:7c:42:7b:f7:5a:8e:
37:50:d1:54:10:aa:bf:4e:7e:55:eb:76:df:00:31:
8c:cd:4f:63:98:00:06:0a:84:1a:40:62:c5:3a:44:
2f:dc:b2:8c:b7:f4:33:c6:81:d1:b1:c9:83:7a:59:
13:2a:b0:75:e8:93:f7:c3:1c:bb:f9:de:e0:1e:9e:
7a:e8:50:9e:69:1a:f2:a9:f8:0f:0b:2a:1d:56:ae:
aa:51:b9:db:bd:65:af:40:4b:cd:42:41:04:65:2b:
82:59:de:07:d8:63:a5:12:17:b8:71:9a:d9:b9:af:
f8:a8:cb:ce:8d:ae:84:3a:b9:01:34:d1:13:88:a5:
5f:3d:d6:70:af:ac:90:8a:aa:25:f0:cf:46:63:0a:
62:0d:bf:68:7b:1a:43:dc:9b:fa:9a:a2:b6:0e:d2:
f1:89:86:71:b7:c8:89:7f:30:08:d5:22:77:94:07:
00:93:1c:0b:ba:1a:8f:2c:a2:0b:c3:cd:ed:62:2f:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:84:0B:1A:8B:37:50:B4:52:F8:58:06:D4:3A:0B:81:31:14:EB
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:bc:e5:53:d4:36:43:d5:7f:1a:30:3c:19:c0:e9:46:a7:
51:85:43:cd:f4:e3:a8:0d:2d:ae:ad:d7:fd:21:ca:c4:3a:aa:
40:d4:90:db:8d:f3:50:c7:2c:fc:ce:97:7b:a7:c4:74:25:cc:
8b:cb:e9:bd:dc:b6:6e:ee:7e:0d:14:51:d4:d1:7e:3f:8c:0b:
7f:7b:af:c0:13:5c:88:7e:fb:28:91:61:0a:65:d8:3a:ce:59:
fc:3d:0f:f6:82:b5:ae:a4:8e:dd:b7:4d:66:a7:c0:23:16:e9:
e7:78:51:b8:15:ab:71:98:8a:4f:19:a6:3b:06:28:be:ed:a4:
41:f9:50:72:a3:d7:7e:3c:a4:b7:7f:5a:0c:5e:4b:3e:18:2a:
65:ce:a8:d5:08:64:de:0c:f5:a9:1d:e1:a6:55:a0:9a:ab:7d:
bf:3f:e4:fa:3d:2d:fa:5f:de:45:23:8c:ba:6c:ea:36:a8:a5:
e5:de:75:f2:c7:51:ee:b2:22:fb:61:b3:6f:a3:f3:16:90:8e:
23:0d:5c:dd:c7:d2:fb:00:8b:3b:e5:8f:a8:8a:0f:be:2a:09:
73:c8:5e:67:7a:89:da:d1:a7:39:67:c9:5b:b1:8d:ab:57:7b:
62:76:9f:6d:d1:37:08:c1:71:66:23:78:3c:a3:68:e9:77:2a:
a7:75:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:12 2025 by rpki-client