Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: UYbDGULQ3FXMwjy/SqniqkAoOXoMpQZSvDGLarF3oyA=
Subject key identifier: 26:4D:13:DD:16:6E:BB:C3:9C:F6:9E:9A:17:D6:7C:A0:D0:0E:06:20
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 019A4C982A7789D8FD7DB128F06702EE578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: +Ex2zvQYFRlN7me6C4x3N7XkQ9kP+MxfTEN+NZRPEHs=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:2a:77:89:d8:fd:7d:b1:28:f0:67:02:ee:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=264d13dd166ebbc39cf69e9a17d67ca0d00e0620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:09:52:87:e5:38:b1:b3:bd:f2:aa:7c:b7:
d9:eb:d3:52:b0:4a:8f:16:5d:4d:99:4b:60:b3:e7:
8f:4a:9b:08:3d:28:67:65:09:e4:eb:2b:b3:a8:6f:
9a:fa:5b:65:81:fc:49:14:34:3c:d5:f6:3d:5e:f1:
77:d8:02:72:ba:58:93:4e:6e:b1:32:9d:e7:3e:25:
d8:c8:d4:25:20:9c:49:20:c4:b2:0f:b0:28:cd:a2:
1d:fa:6a:dc:da:a2:4b:ea:7b:b4:00:59:7f:2b:6f:
c5:0d:ee:ea:ef:b6:5f:fe:86:5c:80:d4:23:0c:71:
fe:d5:ce:12:dc:c3:af:d6:c0:c1:44:c8:c4:4e:c3:
0b:d1:52:81:99:db:12:f8:56:73:2c:35:2f:d3:39:
98:e7:6a:e0:fb:b5:03:5b:3c:86:23:6b:1d:93:3c:
7d:1d:06:6e:7d:17:df:04:79:28:3e:df:89:5f:9c:
4c:e5:b5:b7:78:3b:a3:9d:1e:db:49:32:b8:9e:6d:
d8:82:3d:8d:e6:42:d2:00:84:a2:f9:8d:6d:80:42:
9c:08:9a:eb:8a:8f:5a:12:4e:fd:80:2e:e0:fe:5f:
ab:52:8a:ea:8a:99:2f:b3:be:87:7b:43:99:98:6b:
af:4d:25:4d:bc:29:8d:e3:bd:04:84:65:04:c8:66:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:13:DD:16:6E:BB:C3:9C:F6:9E:9A:17:D6:7C:A0:D0:0E:06:20
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:3d:07:4b:fa:68:bc:d9:be:b6:b3:9f:8c:ca:18:e5:46:
84:de:b2:51:9d:55:ed:07:5e:63:c0:f3:10:58:38:2e:5d:ae:
b5:5f:69:f2:df:f5:f3:0a:f8:1d:9e:df:58:2b:11:61:08:d2:
97:cb:cb:dc:d1:a7:16:47:ce:7e:02:4e:41:47:ed:84:50:d7:
ea:dd:3c:3a:6b:16:51:54:aa:0b:30:e3:b3:61:ad:bf:e7:f4:
0e:60:f3:63:59:45:05:d5:38:21:32:1f:c8:a5:98:26:5e:d8:
ae:12:f1:4b:a0:22:78:62:6b:47:b0:cf:fa:50:6c:5c:85:cc:
fb:77:cd:d5:2b:33:3f:d4:90:64:ed:1a:ec:11:8a:2d:50:41:
8c:30:75:c7:b9:6e:94:ac:cb:75:d8:03:bf:66:f5:b1:02:09:
67:ce:ec:87:76:f2:10:08:d3:fc:73:3c:21:00:a4:cd:73:0a:
ba:04:7f:b8:aa:70:d0:44:90:86:ac:2f:b7:36:69:cd:c2:f6:
06:4f:ea:30:96:ff:7f:2d:c5:2c:fa:49:7a:aa:09:04:4d:24:
98:d6:bb:91:8d:99:a5:19:26:8d:2d:f5:9b:0e:0e:c2:f3:c6:
3a:fb:5b:f6:04:85:ed:8f:ce:2f:2d:41:ab:a4:48:4f:f4:51:
cf:8b:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client