Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: TnHPPU2R/PRy92gXtbJcPs7RH9bV+5FFSGOHwJY2Yzw=
Subject key identifier: DE:04:87:17:C9:03:A6:76:4E:76:56:50:A1:8C:AB:94:C6:DD:9D:8B
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019A522C1293E07F3D378761B29D5E0B4F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 0605
Signing time: Wed 05 Nov 2025 04:00:11 +0000
Manifest this update: Wed 05 Nov 2025 04:00:11 +0000
Manifest next update: Thu 06 Nov 2025 04:00:11 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: WPQLYw5Afn8B+gys7ajzcfkIVEZXvKkb7T8DXtriQkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:12:93:e0:7f:3d:37:87:61:b2:9d:5e:0b:4f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Nov 5 04:00:11 2025 GMT
Not After : Nov 6 04:00:11 2025 GMT
Subject: CN=de048717c903a6764e765650a18cab94c6dd9d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:b1:75:3f:7c:b4:22:8c:43:2b:5f:e3:80:
00:08:7f:91:49:04:a2:d2:52:70:04:19:d3:e1:19:
7b:f9:10:5c:d3:72:b7:c2:83:5f:07:c7:d4:5a:0b:
4f:af:d3:b3:ee:9b:ee:aa:f0:13:87:52:45:94:8c:
cb:12:51:92:5b:e8:b2:0d:26:f8:b0:a3:17:04:0e:
0f:f2:1f:41:5c:ad:3d:e6:4f:fb:32:fa:2f:10:d0:
76:47:21:b8:10:73:25:d0:b1:8e:ff:07:de:07:80:
bc:63:8f:26:7a:48:e3:12:ae:f6:f6:c8:d9:52:42:
af:fe:fd:4e:d2:9b:bf:a9:1f:b4:ff:4a:6a:40:5b:
fe:03:37:6e:27:7a:16:93:5a:04:83:b3:1b:ab:de:
68:cc:fb:10:33:58:f9:f0:54:57:51:87:19:20:a8:
68:2a:9d:af:22:c4:aa:45:fa:8e:7c:64:70:98:0e:
1f:af:de:05:c3:bb:8d:d6:78:c2:6e:17:30:19:fe:
24:9b:98:07:a8:09:ff:6a:1b:78:e9:96:e5:7c:17:
3e:f9:a8:94:39:34:2b:cf:08:d8:5f:56:a3:59:3b:
2f:c9:1d:7f:e4:6c:87:02:f7:15:95:96:3e:87:a1:
7d:01:f1:14:e9:11:5e:e7:e7:a7:f5:a7:b1:63:b4:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:04:87:17:C9:03:A6:76:4E:76:56:50:A1:8C:AB:94:C6:DD:9D:8B
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:90:48:24:0e:03:c2:f8:24:2f:03:f3:ee:7e:19:a5:29:
7f:3b:dd:de:a6:22:cf:8b:12:fa:bf:72:fa:88:1c:f9:db:8e:
c6:28:38:e2:7c:30:63:39:3c:44:31:f1:d5:30:6c:fb:b7:65:
ed:77:16:de:9b:a8:74:4e:04:dd:e6:3f:3b:89:a5:cf:ce:04:
ed:db:56:fd:c3:17:fc:b8:49:96:8d:20:5a:eb:25:3e:a2:5b:
94:42:f8:7a:b0:ab:4f:59:08:c0:ad:38:6e:f8:b7:db:01:84:
87:fe:66:e6:60:50:81:d2:1d:6c:b4:f5:4c:86:8b:0b:99:06:
c6:e7:29:36:17:fe:1d:11:6f:5f:9a:87:ad:91:d5:56:3e:c0:
60:f9:44:bc:e8:8d:23:11:3d:f6:34:ae:4f:54:4d:ab:a8:ae:
79:bf:0c:a8:cf:83:c8:f3:5a:ab:85:af:94:53:20:95:ee:f5:
3a:b6:de:17:86:14:d0:51:6d:14:34:ec:6f:dd:2a:8e:a9:ca:
79:2d:e3:2a:e3:11:a8:78:67:a8:f9:c2:d1:b5:e1:ed:4b:87:
8d:ee:3e:54:c4:90:e5:84:a1:4d:35:7c:89:b2:c6:a9:ba:0f:
4b:27:41:e3:40:fa:c6:b6:2f:97:cf:2f:ff:db:30:b9:48:48:
ae:ff:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:04 2025 by rpki-client