Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: 3Sn0ErbN9WxO37X/EAH7wtv5eNs9gkQG5KH6ojkn/Ao=
Subject key identifier: 7A:23:0D:DE:CF:DC:3A:37:D7:1F:CA:24:FA:22:02:63:89:9D:DE:AD
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019A50073EC1C55DFA1E2A195F7E40F8804B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:43 +0000
Manifest this update: Tue 04 Nov 2025 18:00:43 +0000
Manifest next update: Wed 05 Nov 2025 18:00:43 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: tt1yXbPdcMoVssOyO38671fcD6P32bMOJyrTVAM5NLc=)
2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:3e:c1:c5:5d:fa:1e:2a:19:5f:7e:40:f8:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Nov 4 18:00:43 2025 GMT
Not After : Nov 5 18:00:43 2025 GMT
Subject: CN=7a230ddecfdc3a37d71fca24fa220263899ddead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:0e:c7:36:17:c1:de:a0:24:c5:c2:ec:d3:
bc:27:f2:32:2d:27:59:7a:47:fe:8c:e2:09:c3:bf:
cf:49:c7:cf:55:8f:d2:cc:d9:26:66:32:f6:d6:fc:
81:f6:fd:30:d0:f2:d3:1b:2e:35:fe:b7:84:79:83:
f7:45:b7:64:36:81:55:d9:ec:b3:f0:01:7b:97:c8:
ef:d4:d7:20:51:85:3c:2e:fa:50:fe:81:06:fb:8b:
c8:dc:2b:31:d5:91:ad:a0:4e:af:66:4f:7f:54:44:
a4:f8:80:44:56:9d:d0:ce:a5:b5:ae:8a:4a:d0:a5:
b3:08:25:a4:61:30:b0:2b:a5:b0:94:e9:ce:39:a9:
2e:ef:f1:c8:8c:11:c4:56:ca:30:29:49:9e:13:a1:
33:fd:b2:ec:1b:89:76:75:1d:cd:88:b0:68:a1:8d:
66:e6:3d:15:27:72:d5:cc:ba:67:6f:00:b2:19:1e:
44:f6:cf:de:8e:ce:68:68:ee:2f:b0:fb:9b:f0:b9:
2f:e9:bc:73:f5:6b:4c:10:f1:ab:b4:63:d3:2b:b8:
38:82:47:55:de:95:ea:97:f6:59:c9:e0:88:e1:ac:
11:ce:1e:7c:0b:41:14:ec:cd:52:d3:67:20:b9:33:
11:b8:70:d6:4b:3f:b1:1c:b7:7f:d5:59:1d:6e:6b:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:0D:DE:CF:DC:3A:37:D7:1F:CA:24:FA:22:02:63:89:9D:DE:AD
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:03:ec:da:3e:0c:58:9c:91:fc:35:be:db:14:32:83:1d:
39:98:d6:b5:06:4c:9d:73:65:50:05:6d:c0:6f:bb:94:68:cb:
68:9c:0f:7a:d5:8a:93:22:fa:ef:a1:fd:ee:42:6a:10:64:34:
eb:0e:ad:60:43:f1:a4:c7:49:0a:9d:9d:8f:f0:8d:f8:7b:0e:
0c:1b:aa:91:76:36:0e:90:17:02:37:02:3e:11:4c:84:25:ed:
43:f6:8b:3e:ed:da:ea:2c:74:67:ca:3a:2d:fb:e3:a1:13:53:
0c:9d:62:2c:68:a3:ad:1b:98:c0:6a:40:d3:19:29:9b:5f:91:
d1:7a:a4:2b:bd:4c:82:0a:c0:8e:6e:7a:28:93:58:3d:b2:01:
31:3f:d4:2b:d2:c8:c4:f5:60:87:69:ef:d5:6b:47:bd:72:99:
3f:77:8e:b5:f2:fc:22:18:4d:16:0c:d4:6f:bd:36:45:b6:a6:
11:04:9e:4c:8c:d0:16:e6:aa:ba:a8:78:a3:aa:b5:9a:a0:fe:
cd:f2:2c:6f:ff:a0:72:ef:d8:6a:44:ed:27:3f:06:07:27:57:
6c:6c:2f:4d:dc:be:14:51:a0:0c:a9:f9:a3:a9:2b:5a:03:5d:
87:50:9d:99:96:7b:3e:11:0e:39:11:9f:f3:13:6f:03:32:22:
96:2c:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:26 2025 by rpki-client