Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: 8462ydSLJmUQbM1UR0ccc+V7i8xp73xgw4oi0MtUtHg=
Subject key identifier: 90:50:7B:C8:3A:7C:07:0C:C3:A9:9A:06:B1:A3:8F:EB:BF:03:98:29
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019A4E4F6B5327AB36D5117656217707913F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 10B5
Signing time: Tue 04 Nov 2025 10:00:18 +0000
Manifest this update: Tue 04 Nov 2025 10:00:18 +0000
Manifest next update: Wed 05 Nov 2025 10:00:18 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: TFPEU/qxwgwEV4k9JyY9WNQLyxCvuEzXS5wkl7siccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6b:53:27:ab:36:d5:11:76:56:21:77:07:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Nov 4 10:00:18 2025 GMT
Not After : Nov 5 10:00:18 2025 GMT
Subject: CN=90507bc83a7c070cc3a99a06b1a38febbf039829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:f2:7c:56:ed:51:39:0a:40:eb:d6:23:02:
24:78:5c:46:3c:07:82:8c:11:a9:67:0b:cd:18:bc:
57:e6:c4:04:43:37:98:85:62:44:aa:7e:5a:79:9e:
f8:4b:1f:92:27:2e:f1:c5:71:60:1d:d0:a4:8d:73:
d7:b1:70:7e:4c:44:d8:00:26:71:80:a0:22:f1:ed:
14:2e:48:7b:f3:24:cc:56:7e:74:b1:e1:99:84:6b:
75:b7:77:a4:15:62:87:99:2c:5a:c7:a7:ed:eb:14:
30:80:cd:2e:4f:ca:f5:dd:30:c4:b8:2a:70:6d:3a:
6d:52:23:5b:cb:a9:24:8d:2f:94:1b:d8:b2:1c:47:
82:8f:91:d1:c2:8b:46:6e:04:6f:1f:35:4b:e8:4b:
d3:cb:bb:3b:9b:9c:28:e8:9c:49:94:e0:20:7a:5d:
b6:8f:64:d5:d3:03:a0:8d:5a:c5:3e:a8:96:7f:f5:
61:13:b8:bf:43:7f:9a:48:44:5a:f1:13:59:9e:03:
49:f0:24:7a:38:48:51:bf:13:53:63:ae:cc:f8:20:
c3:0b:6f:54:6e:e6:29:d3:84:1c:e8:93:c7:3f:08:
c0:6a:cf:d8:78:60:a9:59:91:85:21:7b:40:54:65:
06:24:c3:14:86:f7:95:e6:73:aa:ec:0c:eb:4c:79:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:7B:C8:3A:7C:07:0C:C3:A9:9A:06:B1:A3:8F:EB:BF:03:98:29
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:30:af:44:26:48:ed:20:d2:7a:db:f4:d7:72:c6:e7:70:55:
fc:cc:d9:8a:20:80:25:69:1f:77:96:ca:b6:84:f0:f5:fd:ae:
4f:02:1c:df:68:a2:aa:81:55:63:2a:4e:02:1b:bc:de:1a:9b:
b3:23:4a:3e:d9:39:30:42:1f:35:18:5b:f4:dd:13:57:56:f6:
51:d2:ab:f7:a4:96:bb:ba:73:bc:6c:4a:6a:c8:af:f8:0a:c2:
fe:7f:ae:2a:a6:8e:b3:62:8f:5b:de:60:27:13:5c:42:eb:28:
fb:72:c5:56:25:a8:e8:e7:ae:3c:5e:67:69:36:ab:2a:5f:bf:
d8:ae:55:03:5f:1c:8e:b9:24:5e:df:b5:1d:43:2d:4e:66:d1:
77:c8:e3:04:60:c1:ab:28:39:aa:16:17:a6:10:67:e0:ee:7d:
87:ce:59:1e:9b:14:26:3c:2e:eb:4b:1f:05:a8:51:a1:e2:c8:
33:4c:c9:d3:cf:67:c6:ae:88:35:16:6b:1d:2b:cf:76:fc:5d:
e5:83:90:9d:9c:c5:ba:57:1c:dc:5d:14:09:17:69:0f:97:7c:
48:00:75:33:08:35:63:d6:8b:d8:65:d0:d0:c1:4a:11:9f:2c:
91:11:d4:d3:75:94:a4:49:a8:2f:2d:ce:c8:af:e7:b3:cd:c1:
4c:40:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:12:37 2025 by rpki-client