Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: DNlml3+k+POMWZRjZscE63RampnVttk1WHuVueZUMOs=
Subject key identifier: 81:75:FC:B5:0D:42:33:CD:F1:CD:67:3D:70:D1:4D:8D:1B:87:D2:99
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019A52D14ACC90F3747A7DC91733517F09DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:00:39 +0000
Manifest this update: Wed 05 Nov 2025 07:00:39 +0000
Manifest next update: Thu 06 Nov 2025 07:00:39 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: NVzqGNtrtIFPIaMH8Di6lA9KKjrSARpuvvPs40gIo5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4a:cc:90:f3:74:7a:7d:c9:17:33:51:7f:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Nov 5 07:00:39 2025 GMT
Not After : Nov 6 07:00:39 2025 GMT
Subject: CN=8175fcb50d4233cdf1cd673d70d14d8d1b87d299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:f1:b2:9f:ca:4e:f3:1c:fa:49:e1:aa:42:
c2:2a:e9:2b:49:0a:67:0e:51:92:ac:d5:c6:e6:69:
59:fc:7e:69:1b:1c:af:07:67:62:f7:b4:2b:84:39:
be:4f:ea:4b:77:e8:d0:93:ba:c3:e7:b0:18:f1:20:
ef:33:2d:d4:f1:a9:31:87:b8:10:ce:0b:f0:8d:6f:
bd:84:5a:0e:e9:6d:8e:cd:9e:b3:58:3e:ea:44:a9:
f4:f5:6f:e3:e6:b1:71:34:9a:d6:a0:a4:bc:34:1f:
4a:d3:3c:cb:a7:63:92:4a:6a:4d:6c:a1:20:c8:8c:
6b:14:1a:cf:82:b8:d4:11:91:6b:bb:99:90:56:5b:
e6:95:9e:8b:09:e2:00:29:cb:2e:c1:e1:87:3f:ac:
fb:b3:b5:aa:47:69:2f:ff:52:b0:57:cb:e5:55:b9:
c7:79:36:97:63:7b:7a:f4:09:b2:2b:d9:09:39:d8:
a8:d0:75:5c:99:63:7a:34:87:5e:c9:24:07:2b:73:
27:8f:59:03:9d:a8:e0:9d:b1:48:f8:63:97:0e:6d:
75:77:62:63:e7:10:58:16:aa:1a:36:5b:7c:6b:28:
ad:5f:91:77:7c:22:bb:27:f5:b8:4a:c3:8a:8b:e2:
07:07:f4:43:95:61:68:93:ed:8b:cb:df:73:12:04:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:FC:B5:0D:42:33:CD:F1:CD:67:3D:70:D1:4D:8D:1B:87:D2:99
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d1:c7:85:9a:2e:42:c9:75:bb:a2:7e:28:aa:3c:1e:22:7e:
d3:f4:e0:60:ae:51:91:94:3e:85:05:2b:42:44:2b:13:d9:cd:
4a:5e:2d:dc:27:6d:3c:33:a3:52:da:70:ce:a7:1a:79:98:d7:
1f:3c:da:42:b3:ed:1f:2a:b4:bf:ec:2b:b5:53:36:fd:de:15:
8c:ab:f2:ff:22:75:78:a1:04:90:de:85:d9:fc:30:59:f9:4f:
d9:40:59:02:cb:9f:ea:80:d1:eb:20:98:38:44:58:a7:f8:f4:
ed:3a:12:13:fd:29:05:70:2f:7b:a9:56:6a:5a:0a:af:1d:fc:
ad:0a:16:97:e8:f5:bf:7d:7d:ba:b0:5d:99:9d:93:16:10:29:
8c:4f:c5:ca:e8:a2:a0:ee:28:f2:de:d4:78:30:a5:f6:86:e7:
55:70:35:aa:17:82:6d:aa:12:79:2f:f6:ee:e4:c2:34:18:3e:
c3:e6:61:14:9b:a5:2b:5b:00:de:57:92:f5:c8:65:25:64:39:
8f:0a:9e:b3:db:79:ef:35:9c:73:0d:ee:59:ce:9f:e5:59:de:
3d:c6:a4:0b:fb:08:3e:7c:9e:c5:eb:1f:1a:e3:86:98:0f:22:
95:9c:cc:48:fe:61:12:d0:76:07:55:0f:ac:ca:03:81:63:d6:
23:dd:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:52 2025 by rpki-client