Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: sG8W79IZCoypcvqzQICmhTyVzql9sMMr8o2EY9FCCts=
Subject key identifier: AE:76:71:5B:E2:1D:2C:D7:42:3C:0A:FD:7D:5D:47:41:CA:83:F6:65
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019A4D3D2E23A81042AB28A597E891AE9D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 13F2
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: 0RWRgyazoReLQQCoPkSmVuyOZ+4RBCaoTgfbAdICf28=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2e:23:a8:10:42:ab:28:a5:97:e8:91:ae:9d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=ae76715be21d2cd7423c0afd7d5d4741ca83f665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:95:b5:33:fb:15:c5:4e:ca:72:98:dd:bb:
0a:f5:51:31:af:1c:bb:33:0e:59:ba:c4:50:5b:44:
2d:c0:48:db:24:79:9e:0b:9a:37:a2:95:20:2d:49:
b3:12:c3:9e:50:ae:a4:62:73:cd:fb:1c:0b:5a:31:
3a:e4:d4:4c:14:29:8c:41:31:8c:ae:4d:04:10:c9:
26:da:88:6a:dc:4d:89:03:cb:cb:51:c0:74:ff:52:
24:93:fb:32:b0:ab:3f:fa:82:60:f6:00:be:48:26:
71:ca:00:ea:5e:82:c6:15:09:cc:a4:6d:08:a9:49:
f7:d3:ef:fb:05:4d:83:aa:e9:62:10:0b:61:0a:00:
e2:65:73:c5:94:7d:c4:08:69:08:0f:34:8f:df:23:
da:07:44:0a:ea:b2:af:54:dd:2d:b2:90:38:a4:21:
e2:5d:b4:dc:4e:8d:ab:91:03:1a:01:01:9b:01:d6:
66:d5:76:13:7a:e6:0d:73:da:0e:32:11:30:a6:60:
da:a1:12:b8:65:da:55:0f:62:1e:8e:c5:6a:b6:0c:
7a:ee:1d:2e:23:18:bd:46:60:62:d7:1a:dc:64:df:
ce:a8:61:61:af:10:d6:a4:92:aa:76:19:e5:22:f7:
c4:79:72:68:77:69:44:2b:ff:45:61:ca:4c:aa:5d:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:71:5B:E2:1D:2C:D7:42:3C:0A:FD:7D:5D:47:41:CA:83:F6:65
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cb:6d:af:90:d9:81:ab:15:a7:f2:35:8d:24:bd:61:4e:56:
7d:a0:c7:35:1c:41:77:b1:36:83:43:45:a2:24:76:a8:1d:cf:
e6:e1:c8:48:9d:c7:a9:67:3c:17:20:0f:c4:c0:79:b6:ed:03:
47:2d:ca:d8:4a:88:b4:04:f3:1c:e6:f4:e9:17:df:da:b3:6c:
27:aa:a0:6d:bd:56:92:6b:4b:5d:e7:cd:ba:6e:70:97:f3:95:
89:fe:2e:16:40:96:3d:40:ca:e1:5f:b3:a8:bb:98:64:8c:48:
26:9e:74:a3:5d:eb:4a:20:c1:15:4f:01:21:a8:93:24:4f:3a:
67:6e:62:c5:c4:3f:27:80:63:30:ed:71:9a:f2:e6:aa:3d:f2:
03:fe:c3:19:10:61:f3:3d:f9:b6:d2:a8:73:8b:18:ed:a0:8b:
8f:ea:fa:4c:4f:0a:a2:0d:2a:1e:64:2f:ae:80:48:13:6d:4e:
56:ad:b6:20:84:b0:b2:e5:43:dd:3a:bb:4b:08:6b:27:88:20:
a2:e7:b1:1d:cb:3a:9f:7d:f8:d4:fd:6d:c8:3f:b9:2d:8b:2c:
31:16:a0:52:d5:61:49:75:ff:23:86:2b:e7:69:d3:ba:fc:d5:
2a:85:c3:7e:f5:a9:88:e0:e5:ec:8c:3b:fe:ce:b7:45:79:af:
8b:0f:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:33 2025 by rpki-client