Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: LdEOhmcpjFL19slORaFWOJcnPcoLfz5UgR1G8+x+pfk=
Subject key identifier: 1C:88:05:A7:F1:BE:2C:AB:A9:44:45:05:64:1D:57:7A:4A:D6:BC:E1
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019A51F5497F08F435CD4EB40E159F76D27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0C0A
Signing time: Wed 05 Nov 2025 03:00:20 +0000
Manifest this update: Wed 05 Nov 2025 03:00:20 +0000
Manifest next update: Thu 06 Nov 2025 03:00:20 +0000
Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: kS+5pxuO+sPxG3T2n+KuPrtgVYJO8RuSKPObgclRg7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:49:7f:08:f4:35:cd:4e:b4:0e:15:9f:76:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Nov 5 03:00:20 2025 GMT
Not After : Nov 6 03:00:20 2025 GMT
Subject: CN=1c8805a7f1be2caba9444505641d577a4ad6bce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:5b:c9:80:35:4c:b3:b8:95:67:08:bf:d7:
e2:6c:b7:07:49:a0:88:99:97:6f:9d:11:d3:c2:c3:
40:53:b9:0a:98:8e:ed:46:b3:ac:c3:98:7e:c6:ca:
4b:dd:ce:bc:cf:38:43:be:e6:20:e8:24:39:2a:88:
dc:95:5b:95:72:3c:7e:50:89:b8:95:df:9c:fe:33:
1e:e3:ec:4f:4e:4b:df:9b:fd:fd:c2:97:7d:6e:cb:
e0:c0:0b:c1:bf:8d:aa:52:e5:9c:b4:e4:e3:20:67:
f9:cc:71:76:21:50:a0:47:9c:4b:80:01:ca:c0:71:
ce:6e:b6:74:bc:fe:5d:8c:d6:29:64:02:a7:1a:d3:
c6:65:72:b1:90:3e:13:4e:ec:2e:2d:d6:8a:ef:be:
62:da:6e:ac:6e:bd:ce:1a:49:d7:7d:2f:5f:84:16:
02:3e:03:af:1c:75:da:3c:2d:a3:6b:cf:ef:5e:d5:
8c:f0:64:03:ea:60:6c:b6:7a:a9:93:ef:f2:be:f3:
52:cc:af:c4:6f:a9:27:42:d5:38:dc:65:cd:34:9c:
15:e2:ef:ee:c2:d2:66:4b:20:7b:f2:6c:8c:dd:59:
51:49:6e:08:d7:67:34:e3:80:f5:07:60:2b:a8:5c:
0c:86:bc:23:d9:89:6d:24:c1:72:50:b2:7f:cd:76:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:05:A7:F1:BE:2C:AB:A9:44:45:05:64:1D:57:7A:4A:D6:BC:E1
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:13:28:c7:7a:30:e8:a7:ed:d0:7d:1a:bb:7f:8e:aa:cc:
d0:28:c8:d3:b7:b2:b4:f7:94:87:cc:a7:2a:e6:69:3d:c5:8a:
c5:6c:12:96:52:4d:5a:8e:49:da:e0:d1:6d:63:5d:d4:4d:95:
4d:f7:dd:18:91:7e:a5:07:b7:3c:f5:33:c5:d0:73:f0:c5:27:
a9:4a:75:d9:9c:ba:6d:fe:c2:9b:e8:20:8b:aa:b2:1b:1a:bc:
08:5b:9a:42:62:97:9a:37:50:40:4f:42:a8:cf:6c:f5:7a:3c:
a3:b9:24:cc:e6:c4:3e:f4:a2:09:53:8a:38:ca:a6:0a:93:3e:
3d:66:4c:ab:18:7c:28:e3:26:26:e1:ba:b3:2a:1f:e0:17:1c:
fa:94:a6:89:f0:6f:ff:cb:19:f9:2e:94:07:14:0f:d7:7f:bf:
32:13:a7:da:a2:0c:54:d4:c8:56:eb:46:dc:94:1d:41:fa:0b:
67:e7:60:31:7d:58:89:17:18:c4:e7:c8:d0:20:48:27:9b:da:
2c:30:61:f9:b9:c8:ea:54:bd:a4:44:c4:c8:9d:72:8b:07:62:
49:fa:6d:a4:24:18:10:fc:00:1d:f0:69:d3:0e:9e:b0:d0:0e:
a1:b8:e8:b1:dd:f3:ac:9c:3f:06:d4:55:e8:ce:75:4f:31:49:
16:77:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:53 2025 by rpki-client