Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json)
Hash identifier: Z13WH0W4deXxri4rnspE6ugWqWht7ULEEWRwwLp3WJU=
Subject key identifier: 34:DE:6D:E8:FA:84:BC:D1:5E:43:AA:1E:DC:0F:96:7F:54:F9:A7:16
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 019A4DE1FA8D22978B2672F4A213C9CDA3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: 5-Dy59i1_U0ZRMyz_6apK6err6E.roa (hash: HTKVf7q+nYn6Qr/j/qsCTy9hUzuLpJ7dJx3pfn4b6GM=)
2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: d+NE3qJtpXC4Sq6iFprQDko9e5m+EVqlCw31jcquMLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fa:8d:22:97:8b:26:72:f4:a2:13:c9:cd:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=34de6de8fa84bcd15e43aa1edc0f967f54f9a716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:b5:85:b4:11:26:27:c9:d5:50:09:d6:eb:
9e:e8:b6:39:d1:f5:3e:69:10:47:a9:6a:e3:9f:ca:
dd:04:b0:ac:f5:7c:56:38:db:b3:42:ad:9f:96:4a:
77:28:52:85:ab:f0:71:91:a9:9e:67:df:0d:f2:f5:
5b:1f:5b:4b:4e:70:c6:7f:9b:b7:4c:88:80:7e:b9:
a9:e5:a3:41:6f:b9:40:10:4c:c7:f8:e0:c4:2b:6d:
38:cc:41:c6:35:ff:10:d7:2a:b6:1e:72:23:6b:dd:
14:6c:61:ca:a5:67:da:55:5a:22:9e:1c:9c:2d:e0:
78:d2:30:d1:6c:2e:bd:21:44:6a:a8:ed:bd:e3:16:
c1:b8:59:08:e3:0e:5f:7f:e5:19:50:58:27:8f:0b:
00:3a:87:01:02:e8:a1:6e:d3:97:27:8a:ce:96:e2:
e4:91:a2:aa:46:fa:94:94:e0:aa:dd:9a:32:5b:18:
e7:41:8d:1b:ce:4b:b0:b4:f2:25:eb:da:c2:5a:8e:
eb:0b:dc:83:45:e4:b6:96:11:0c:a4:8a:94:a2:34:
d8:27:c3:06:3a:94:6a:34:dd:22:e0:72:42:35:de:
46:a1:e6:6c:f6:70:42:b3:70:ac:18:4b:a7:98:21:
a7:70:f7:ce:66:47:a4:63:18:69:e5:74:d1:d2:7b:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:6D:E8:FA:84:BC:D1:5E:43:AA:1E:DC:0F:96:7F:54:F9:A7:16
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:2a:55:8c:0a:5d:89:1d:c7:fe:a6:15:8a:29:5f:25:f2:
2b:89:16:bc:0e:30:cf:bc:50:38:ab:e9:cf:14:9b:79:47:1f:
f4:4e:7c:8f:cb:90:0b:b5:f5:6f:f4:ec:29:53:8e:fc:c5:42:
0c:2c:1d:2f:48:07:43:db:4b:d3:0d:f8:04:b2:e5:88:48:6f:
8d:a7:6a:7b:e7:56:76:60:77:c9:d8:98:b6:1c:ef:08:4c:f4:
64:36:ba:eb:59:21:cb:e8:4b:43:46:0f:8b:4d:c1:79:37:ac:
21:03:c2:8b:7d:69:60:4b:3c:35:ab:c0:5e:aa:9f:83:1f:2e:
ba:25:f9:c5:3a:b2:59:fa:9a:95:4e:d6:82:b2:a5:9d:be:a7:
b0:54:32:6b:7f:3f:67:fe:d7:c7:14:12:24:1b:5d:56:2b:70:
39:6a:82:9e:d9:aa:8f:12:ab:9f:e6:b5:02:3c:6f:6e:e1:59:
11:c0:5a:e8:fb:75:35:0a:c5:63:a1:51:e6:c1:78:94:92:14:
43:ce:74:0d:7a:93:b9:f4:02:73:71:e9:f6:73:0b:03:d7:96:
25:91:f3:52:a5:73:0b:32:47:1f:c9:2c:e9:bb:76:9c:9c:99:
e8:3f:65:ee:f1:ed:b9:87:97:5d:16:6e:58:2a:99:49:6e:c1:
ff:33:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:46 2025 by rpki-client