Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: 5TXyec/xNfR6VBPs9wvElMng5ARGQKQt0MZFSfclh6o=
Subject key identifier: A4:FF:7B:2A:CE:3A:01:8A:47:68:68:7E:0C:C5:AF:51:D7:2E:9A:A9
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019A4D06E84A3FB117173A613593AC820445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1319
Signing time: Tue 04 Nov 2025 04:01:29 +0000
Manifest this update: Tue 04 Nov 2025 04:01:29 +0000
Manifest next update: Wed 05 Nov 2025 04:01:29 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: +1TYAw+e729QIo8JYbFU5SyTtl/YEuwx1CajDmKg8Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e8:4a:3f:b1:17:17:3a:61:35:93:ac:82:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Nov 4 04:01:29 2025 GMT
Not After : Nov 5 04:01:29 2025 GMT
Subject: CN=a4ff7b2ace3a018a4768687e0cc5af51d72e9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:e8:f7:95:85:5b:53:51:2b:ff:41:f3:ef:
dd:ab:10:23:ba:24:8a:b7:c2:92:cd:29:2e:bd:ec:
73:44:0e:bc:6f:25:ee:ba:4f:c6:45:fb:57:9e:47:
ec:62:0b:a5:7d:95:c0:5a:60:a9:c8:99:47:46:7e:
3c:80:8a:86:45:a6:be:7b:82:a5:5a:6f:73:f4:fa:
e1:90:84:6f:29:a3:d7:b3:75:72:23:9d:13:fa:ae:
92:6b:32:a0:fe:74:79:0a:d7:de:04:1a:59:e6:2d:
04:ce:0a:7e:f4:b9:a3:e4:bb:98:c2:ad:c7:e1:8b:
ab:e0:e2:ef:73:83:61:d4:22:06:c6:97:25:17:e2:
19:d6:4e:9b:a5:66:50:d3:4a:cf:16:f7:71:49:94:
60:29:92:1d:db:11:45:7b:b8:3f:78:38:ec:9a:48:
01:61:67:84:5d:98:fb:19:c7:b2:7d:23:f1:8b:a6:
65:a7:97:c1:dd:3d:d5:11:a2:b6:f9:e6:b0:14:a0:
58:02:63:29:08:71:74:fb:dd:c9:4c:f8:cf:4e:6b:
f2:12:17:9e:d3:5c:a8:b4:2c:03:1e:2a:b9:9b:e3:
cf:7e:b4:7b:eb:cc:13:87:1a:e7:5f:a1:b9:48:7f:
88:63:cc:e6:27:b2:50:47:01:e8:82:76:2c:a3:a8:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:7B:2A:CE:3A:01:8A:47:68:68:7E:0C:C5:AF:51:D7:2E:9A:A9
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:aa:08:e3:01:f6:17:f4:8c:d5:22:c1:39:bf:69:cd:ee:
06:77:3a:8a:48:72:ed:fb:9e:54:cf:e5:8a:fd:ef:b4:1c:37:
3f:9f:54:18:df:11:76:74:d7:ed:36:81:ff:f2:fa:89:94:6c:
10:bc:51:c8:82:50:fa:c6:8d:78:b9:8d:a1:92:1f:16:89:8a:
39:22:0e:ab:b2:d7:17:15:82:bf:75:0f:c3:b0:c5:98:2c:28:
33:97:37:ee:7d:82:1d:da:a4:2b:a5:f8:96:81:ba:c9:15:c2:
73:e1:89:41:24:f3:a4:bc:0e:5b:76:c3:36:aa:10:b9:54:8f:
c1:4e:a8:43:d3:a3:fe:93:9f:24:94:60:a4:76:17:d2:7d:6f:
d4:29:5e:e4:05:f4:73:c9:50:68:e8:61:0f:3f:14:3a:c8:b4:
6c:62:01:9c:17:f4:e0:82:cf:b6:f1:26:02:91:cd:96:f4:74:
43:52:36:12:bf:32:aa:3a:9a:18:d5:29:2e:2e:1b:89:c3:d9:
a9:c3:0f:04:58:2d:d6:1d:bf:06:48:c5:93:d1:10:41:cb:87:
f6:61:36:55:d2:4f:5a:e3:ea:a2:98:c2:9d:ad:c9:1f:d9:25:
34:87:22:d9:08:49:74:ec:f6:fe:a7:3d:be:f8:84:42:05:69:
4d:ef:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:26 2025 by rpki-client