Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: sT+4gFXBYrdfv3s2j4r5/9uVKOepqucetu+YlNn53c4=
Subject key identifier: A0:EC:12:C1:88:DD:58:F9:57:65:07:48:DB:75:58:BB:13:75:C7:B8
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 019A4D3CE5FDEE84FAD6A66DD147C70FAEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 5qoPVR95OvS/n6iXrqjwbz8uc62BWz5napgmXd06a68=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e5:fd:ee:84:fa:d6:a6:6d:d1:47:c7:0f:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=a0ec12c188dd58f957650748db7558bb1375c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:fe:b6:2a:04:a3:93:e2:d1:ec:a5:a3:0b:
16:8f:80:9f:d6:43:90:5f:84:c3:a9:10:fc:6c:e0:
95:47:79:87:fe:e6:4f:e3:b2:9e:3d:57:66:fe:17:
7e:eb:49:d0:38:af:4d:de:e4:65:c8:91:35:4e:a3:
29:46:11:1f:2d:60:38:e2:bb:9c:ca:90:a6:78:2e:
63:ca:e9:f8:26:57:47:a4:e8:c2:d0:cf:5b:ef:7f:
e6:9e:cb:6b:8a:4d:be:9f:8b:7c:24:71:6e:c2:0a:
48:b7:17:24:8e:c4:7d:98:b9:c6:fe:8c:1f:b5:be:
e6:a2:81:42:9e:6e:7d:ed:cc:de:bf:1b:7c:d2:0c:
f7:57:e6:e2:c0:73:e5:4e:3b:dc:81:35:80:63:43:
78:c0:eb:18:c4:c6:92:31:a0:fe:fd:7c:8c:46:1b:
2b:1c:ab:41:e8:ea:21:d4:e5:54:8d:16:80:f4:92:
08:00:21:b7:b9:0d:b8:d6:7d:c2:9f:df:a5:56:b5:
19:16:69:6f:e9:03:d8:58:97:2a:65:78:f8:21:08:
f1:55:01:1a:08:a1:20:ec:c8:95:fe:3e:d7:04:84:
bd:9b:e5:d2:92:00:55:28:2e:b4:2d:c1:95:f2:9b:
05:db:78:53:50:5f:a2:dc:5b:19:e3:ec:5f:91:34:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:12:C1:88:DD:58:F9:57:65:07:48:DB:75:58:BB:13:75:C7:B8
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:e0:86:71:d3:36:79:9f:5c:fa:fd:fd:35:e1:95:5c:2d:
11:cf:cf:89:d0:24:00:2e:10:0e:ed:10:8b:94:41:8c:df:b2:
fe:f1:18:00:6e:db:32:f7:f3:e7:26:23:4e:5e:01:1e:d0:b0:
f6:97:e4:64:8e:31:83:e8:83:78:73:a5:87:06:08:ac:f7:aa:
15:5d:3b:b2:0f:0d:7c:53:6c:ee:fa:57:e8:c6:b6:04:12:42:
17:3a:81:e9:4f:c6:82:66:1a:68:18:d1:5e:10:dd:be:0d:ee:
a0:a6:0d:38:72:80:c0:79:75:85:bb:81:dc:22:3f:8c:46:53:
34:b1:56:5a:d3:50:2c:e0:84:92:f6:00:41:54:3b:5a:1d:ce:
62:09:58:3b:8b:5d:27:3a:ce:b0:cc:ca:be:de:0f:18:60:8e:
2b:af:6a:f5:6a:2d:00:85:ab:a6:e5:e0:99:20:c3:a0:cb:df:
eb:5f:dd:f3:36:8d:c6:60:98:ce:1a:19:17:c7:b5:d8:dc:82:
25:b7:c3:3f:b5:10:79:b4:8a:76:0f:fc:cb:37:82:cc:4a:4f:
71:9c:9c:7b:77:85:68:38:c2:7c:85:15:78:fc:71:8b:27:f1:
bc:61:f7:b6:7d:fe:cf:fa:95:d3:23:26:fd:da:13:46:c1:9b:
f6:d1:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:55 2025 by rpki-client