Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: mqyTDzWxqCsUAJe/KqKqYGCIxdQkX7RH/QgmS0kpRag=
Subject key identifier: 89:0A:B9:C2:91:35:8D:6E:A8:BD:42:89:90:A1:87:1E:97:9B:7B:2D
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019A4F2B538591658D833997AB3B0E7DD02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 14:00:30 +0000
Manifest this update: Tue 04 Nov 2025 14:00:30 +0000
Manifest next update: Wed 05 Nov 2025 14:00:30 +0000
Files and hashes: 1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: RsMvoGzjp6wTyCOipZlWS/uKMbQw28FEvK9Z8N++qqs=)
4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:53:85:91:65:8d:83:39:97:ab:3b:0e:7d:d0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Nov 4 14:00:30 2025 GMT
Not After : Nov 5 14:00:30 2025 GMT
Subject: CN=890ab9c291358d6ea8bd428990a1871e979b7b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:5c:15:b2:f1:ee:78:db:72:11:05:3f:49:
3f:15:20:72:0a:54:69:e8:a0:fa:f4:c3:88:3a:d4:
38:8a:37:d2:7e:f5:f3:cb:be:9a:b8:84:9e:13:d2:
a4:e6:9b:50:07:71:1c:e7:ca:09:84:cd:f7:6c:ea:
dd:29:94:14:c9:87:16:f9:ef:69:28:3d:a3:a0:11:
05:47:ca:cc:39:06:eb:93:4a:c2:47:a4:c1:12:a2:
9a:12:07:33:b8:4a:c7:c9:1a:c1:a6:e8:df:8b:35:
ec:9d:03:cf:d9:f7:f0:a5:78:3b:0e:16:a9:61:3a:
c8:16:85:fa:96:e9:1e:16:a3:78:b1:f1:97:54:54:
9b:d2:e1:52:32:30:fa:b0:7e:64:b6:8d:fb:47:e8:
c2:89:cd:fd:6a:30:61:d0:67:74:8b:41:07:3c:fd:
48:b7:1d:a7:09:c9:7e:47:56:68:65:3b:9d:ab:01:
a1:df:66:8a:89:5b:88:f8:67:48:64:95:27:49:e3:
b6:36:2e:42:42:07:e1:83:7f:06:81:22:ec:d8:8a:
11:c8:db:50:1d:c6:e9:76:62:43:23:1d:a3:5e:a8:
fb:a2:eb:ce:a3:37:02:38:f0:28:4e:93:ea:39:0f:
7f:ca:a9:67:e2:a8:0f:10:2f:8a:47:80:e2:58:43:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:B9:C2:91:35:8D:6E:A8:BD:42:89:90:A1:87:1E:97:9B:7B:2D
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6f:3a:b1:30:33:34:4a:0e:88:aa:49:8b:17:3c:2e:54:b8:
4e:57:3c:fe:79:ff:fa:64:7c:80:f9:f1:00:fc:76:b0:45:d6:
0e:d2:c7:33:fe:ae:37:58:76:0b:cc:c8:3e:0a:e8:5b:31:8f:
91:bc:84:80:49:48:d8:94:54:41:5d:df:eb:78:84:fc:2b:6c:
3e:be:95:cc:83:68:0c:24:a1:d5:b7:5a:a7:8d:70:1f:41:60:
85:99:54:7f:91:ce:88:ce:ae:f4:b1:c1:b0:f2:c9:83:3a:71:
f4:f3:f3:e4:a2:12:ec:72:2b:57:89:e8:3e:db:c6:97:b5:99:
b6:bc:07:ed:f8:f3:7c:ba:e4:bd:7d:32:35:0f:1b:88:52:69:
be:8e:07:e1:15:94:b5:44:fa:c5:4a:75:ac:bf:c7:5e:80:d4:
fd:38:bc:73:34:54:66:44:d2:ee:86:d0:1a:68:40:a5:33:63:
a9:9f:79:b5:b1:82:f4:58:2e:d4:a7:09:fd:f6:1c:44:d6:c2:
e4:a3:50:22:a8:07:11:b4:d8:cf:9b:a8:30:8e:ad:e3:ee:eb:
3f:ec:93:2a:59:5c:01:ce:32:53:f3:fb:6e:b8:0c:66:48:5a:
87:c3:0c:98:45:4b:40:69:5b:60:a5:9c:d0:cf:16:99:30:4b:
55:5b:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:51 2025 by rpki-client