Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: l97dTX1jzcYNNh7zJQwdjTVsVS4CoQt2A8kJrHkIkmc=
Subject key identifier: 51:A6:AE:AA:DE:E0:7A:13:E0:4C:5A:F5:3B:F1:A5:1D:A2:4A:70:C4
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019A4EF5EA0834DBBBBD75CC8CC7AA259640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 0423
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: kNMVpgnfgu9X5WIUp1ELIsk6XhmxYIPWGVya2H2S2gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ea:08:34:db:bb:bd:75:cc:8c:c7:aa:25:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=51a6aeaadee07a13e04c5af53bf1a51da24a70c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:42:a1:eb:ee:4a:11:1b:e9:e0:f2:5c:5d:
23:95:1f:29:4b:0e:06:86:35:9f:1a:8d:7a:84:28:
31:ba:f3:0f:54:4c:ec:4f:09:e6:6d:6e:86:17:05:
92:b4:81:9d:b2:c8:9a:64:01:7f:08:f5:18:e3:9d:
de:03:a8:ca:17:8a:a7:c5:47:ca:59:04:a4:94:c3:
40:11:84:86:20:ba:64:15:2d:f1:74:c8:ff:d0:49:
f7:93:09:c8:70:64:80:64:e0:a7:8d:12:ea:4e:7b:
78:65:ab:6e:38:49:22:b7:3c:e7:91:da:c3:2a:2c:
0d:bc:8f:d9:08:5e:c5:1a:12:89:db:28:4b:bd:3b:
8d:38:4d:1e:bd:f4:5b:7b:60:bb:6f:dd:c1:26:34:
5d:53:67:0b:fc:0a:4f:9d:ef:7a:57:64:28:8e:12:
63:17:3f:9b:88:88:61:57:12:9b:f6:dc:76:1d:3b:
e2:f0:45:f7:87:9d:98:1b:05:9d:30:19:eb:40:71:
af:bb:97:e7:82:1b:d2:d4:6a:79:2a:b7:ac:25:ec:
16:bb:f3:ee:8b:29:e3:03:ab:63:66:6b:0e:33:12:
58:69:6c:dc:6d:57:8c:7d:ab:fd:74:e3:20:44:7f:
5c:58:22:d8:28:80:be:ce:48:8f:13:d7:35:6c:e7:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:AE:AA:DE:E0:7A:13:E0:4C:5A:F5:3B:F1:A5:1D:A2:4A:70:C4
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8f:7a:2f:db:ec:34:d5:ba:fb:8e:7f:d8:84:da:ad:68:0d:
21:4b:72:4a:8e:3e:88:4b:f4:56:1b:0b:1f:b5:af:5f:43:68:
d0:ea:d0:b0:ac:40:b5:7d:03:96:27:bc:b8:4b:17:e2:91:53:
57:9c:d4:35:5e:2a:ca:76:ab:e7:69:8b:0a:b1:9d:05:15:5f:
f4:a7:25:cc:4f:04:19:68:e4:f1:76:1a:3c:01:ae:bc:17:7a:
8e:44:dc:77:c7:0d:d3:d8:d0:86:2b:3b:21:31:46:86:94:5b:
a6:f5:98:2f:6b:21:cc:da:f1:60:7a:7d:1a:13:7a:2b:76:ae:
9d:ed:dd:b7:15:13:df:a9:c4:86:20:3a:06:52:f6:64:f7:d9:
87:84:e5:d9:e4:ee:b2:60:fd:5a:08:a6:4a:ee:7c:08:97:2f:
41:34:75:35:b4:b5:19:92:59:bd:d3:d0:44:07:58:f5:fa:1a:
aa:ae:56:e9:ff:9a:45:c4:fa:bf:08:35:36:4c:ee:78:eb:12:
c7:7a:40:ff:8c:23:2f:41:80:b5:24:f8:03:30:28:47:b9:a4:
11:b1:89:14:03:69:c3:dc:00:86:f7:87:13:87:2b:d8:66:26:
90:39:c4:d1:36:60:84:dd:c4:b9:8a:5b:36:67:1e:cd:0a:d2:
42:83:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:42 2025 by rpki-client