Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: arHFcmi2ffZT7blnaCFMY83wD/qIGX01wp8YFT6kih4=
Subject key identifier: 57:CC:06:66:05:E3:AF:1F:DD:0E:1F:25:E9:C3:DD:CD:17:86:7E:BE
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 019A4D7465FA8015667A98C8A47744C1A039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 16AD
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: uYo0m6jmkZbFGsVOQTwtBhArK/FRA+M1xmKakrTauwM=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:65:fa:80:15:66:7a:98:c8:a4:77:44:c1:a0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=57cc066605e3af1fdd0e1f25e9c3ddcd17867ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:02:95:4e:03:4f:15:ed:0f:16:c7:2f:b1:
20:e9:d9:f3:2b:9a:2d:6a:91:bb:19:15:37:e2:7c:
3b:af:bb:ec:63:37:76:54:6d:04:ff:bf:34:99:69:
3d:fe:16:c6:0a:f0:b3:50:50:0a:a0:e2:20:ea:91:
fd:ac:ff:f5:9d:6c:ce:db:d0:51:9d:12:a4:7c:24:
68:de:60:92:75:07:05:f9:55:e8:1b:8f:56:3f:b7:
ce:a9:8b:ad:cf:b5:ee:0f:56:dd:2d:20:e4:a0:82:
74:73:7b:88:f2:1c:f3:95:9f:4b:9a:f7:14:ff:f0:
1c:8c:a3:df:8e:94:a0:9c:c4:d7:e5:bc:af:df:3e:
83:8e:76:24:8d:22:b2:ff:6d:b4:de:87:75:07:54:
ad:53:80:14:ed:b5:b8:3c:dd:85:fa:74:0f:9c:9b:
50:14:d4:9c:83:bc:65:86:e3:24:5c:b8:3b:a4:64:
3d:91:75:f5:3e:47:8b:7e:14:ac:c9:a8:cb:fe:56:
30:c3:dd:1b:3d:a7:f5:5b:08:08:bd:9d:b9:68:01:
0c:59:28:45:92:1b:b4:90:55:5a:a9:de:55:44:f9:
85:d3:ae:0d:f3:a3:e0:71:0d:b4:62:b2:fb:1b:61:
1f:96:2f:75:a8:79:fb:7c:d7:6d:c2:ab:06:bc:ac:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CC:06:66:05:E3:AF:1F:DD:0E:1F:25:E9:C3:DD:CD:17:86:7E:BE
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:b1:12:99:7b:b5:c6:76:b4:fa:32:93:75:1f:28:04:d5:
43:fb:d3:00:a6:9f:b3:cd:3d:59:27:aa:36:a7:f4:b1:5d:b9:
6a:b1:a5:d5:52:48:8a:60:c8:7c:73:20:7f:7f:cd:39:51:1f:
b2:0d:ec:fe:de:df:3b:b1:55:2f:15:2c:4d:5a:c4:86:9e:07:
df:9c:43:db:61:70:91:d6:75:d2:d6:4d:2d:e3:f5:d3:83:cc:
39:48:98:68:f0:c8:d6:10:97:bb:b3:fd:06:23:2a:37:e6:33:
5b:7a:33:9a:2c:0c:20:95:8a:9e:73:a5:dc:68:b0:98:3b:ee:
87:d1:d4:62:a9:b4:dc:62:5f:23:89:60:7e:bc:2b:22:b1:0d:
82:66:7d:26:62:90:c4:e8:6f:b9:7e:3f:38:69:41:c0:ad:13:
1c:91:9d:5e:f4:b6:9f:9e:60:44:00:02:e7:66:7d:ac:24:06:
5a:2d:19:82:fe:3d:b3:09:08:84:20:f3:e8:94:0a:b9:82:30:
6b:ba:2f:3f:7c:48:a2:4e:4d:4d:70:7e:40:9c:c8:94:7a:a6:
37:2e:c3:ec:e8:8e:3d:1b:fb:5a:08:89:70:4a:0b:f9:0a:8f:
6f:14:12:53:a1:0e:d6:a9:70:e3:cb:c0:bc:2d:12:82:ee:11:
99:94:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:48 2025 by rpki-client