Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: MtvfJCJnspFvs97fn2TPYRQgY9G8D0EiXwp97IfOyaA=
Subject key identifier: 73:53:0D:4A:33:E7:9B:42:75:58:E8:AE:8E:B4:69:DF:5A:0B:EF:5F
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019A4FD0A519FC102636C860CBF7B64D4F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 17:01:05 +0000
Manifest this update: Tue 04 Nov 2025 17:01:05 +0000
Manifest next update: Wed 05 Nov 2025 17:01:05 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: RvRtX1TnpvHw5Is/cSvYon9Ep0dtG3j7SNqDxhjT6Nw=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a5:19:fc:10:26:36:c8:60:cb:f7:b6:4d:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Nov 4 17:01:05 2025 GMT
Not After : Nov 5 17:01:05 2025 GMT
Subject: CN=73530d4a33e79b427558e8ae8eb469df5a0bef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:4d:6e:fe:cd:ab:5e:43:4a:cd:5c:8c:ab:
48:98:13:b7:3f:f6:7e:66:42:0e:7a:28:b4:ac:9c:
03:0f:41:62:8e:98:1a:b4:ad:26:a0:d7:a0:45:a3:
66:81:cc:a8:34:1c:73:bc:38:bc:28:47:20:f9:c7:
02:7a:b6:62:b0:74:45:c5:b1:f3:1e:26:b7:ed:32:
21:e5:d3:f6:88:f5:00:b9:42:2a:54:f6:90:86:2a:
4c:96:26:5b:4a:ff:11:04:60:2a:c0:b8:b5:22:16:
81:78:25:04:3a:e6:5d:a8:53:64:6f:0a:cc:a1:54:
74:0a:83:04:ca:47:17:fe:7f:fd:2b:95:05:fc:23:
bc:76:a0:f5:fa:d3:4d:6a:ab:6a:77:5f:7f:29:e7:
6d:59:3b:5d:15:06:1a:07:7e:fa:aa:39:49:d3:66:
26:3a:c6:fb:11:d1:6d:20:23:40:d7:bb:aa:b8:41:
bf:78:4d:f5:39:ea:10:fe:22:2f:8d:ad:6b:26:f5:
f5:73:85:28:b7:39:f9:b9:d5:c1:7c:a7:74:36:bb:
66:95:25:6d:05:60:29:74:a4:aa:68:d5:5a:7e:96:
cc:c8:43:29:0d:7d:0d:b9:d4:43:63:11:bf:1a:b3:
b2:b6:26:a8:9a:37:36:7e:86:fd:23:b9:fe:74:d8:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:0D:4A:33:E7:9B:42:75:58:E8:AE:8E:B4:69:DF:5A:0B:EF:5F
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:3f:25:0d:48:1a:0f:e0:1f:d2:1a:9b:d4:8f:b1:08:cc:
90:28:f5:48:53:e5:07:05:a5:94:0d:53:79:d1:61:a3:34:cb:
67:5e:86:a0:75:61:99:e9:10:be:00:ab:87:a9:da:a9:cb:a3:
3a:a2:77:be:54:e5:02:bb:47:55:b6:f9:47:2c:1b:5f:8b:1f:
23:53:9c:30:8e:eb:ca:96:3a:54:b7:c3:46:1a:26:fa:89:61:
ad:aa:20:76:a6:e1:cd:e9:a3:33:b4:63:42:e9:c2:ce:67:fa:
18:f4:65:1f:51:54:ca:b7:75:17:b0:fd:3b:d0:f5:02:8e:b6:
f0:09:34:24:d3:c8:6c:e5:dd:10:aa:69:09:17:49:1d:e3:af:
bf:66:78:d8:97:ac:42:a9:50:2c:1c:db:91:ac:c2:f1:05:82:
db:b6:05:0f:36:b7:76:16:85:e7:77:0d:1a:2a:ca:ae:fb:7f:
19:85:90:bb:34:be:01:05:85:a4:73:01:e0:67:31:85:81:6c:
9a:f5:48:70:d2:8a:35:9b:80:4a:8d:0f:f1:c0:74:be:65:37:
9f:a3:d2:18:b4:97:1c:86:a2:c2:91:82:78:91:6c:80:d9:fd:
49:a7:58:2c:55:33:e8:41:1d:77:1a:5d:c8:70:7f:34:88:22:
56:c2:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:24:29 2025 by rpki-client