Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: lYTFMNWJaXPUH77FzdCwCqqXMoA+GzDYvJsj6Z2WAtc=
Subject key identifier: 78:1E:3E:73:BE:56:87:53:B5:E4:6A:CE:EB:B9:B0:66:CB:CE:BD:55
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 019A5375BDD7CBEBEF6422B84A26D6374145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 044F
Signing time: Wed 05 Nov 2025 10:00:16 +0000
Manifest this update: Wed 05 Nov 2025 10:00:16 +0000
Manifest next update: Thu 06 Nov 2025 10:00:16 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: NmvOomWYq2Y5Pxt3lnNt7modgkzZaISxSWXsltjXYYY=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:bd:d7:cb:eb:ef:64:22:b8:4a:26:d6:37:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Nov 5 10:00:16 2025 GMT
Not After : Nov 6 10:00:16 2025 GMT
Subject: CN=781e3e73be568753b5e46aceebb9b066cbcebd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:bc:87:5c:9f:d8:c0:d9:82:d1:5d:91:f7:
ce:ee:af:db:9f:1e:37:e7:de:40:98:bc:65:a7:15:
aa:ff:a6:de:94:9d:75:45:7b:bf:40:fd:2d:5a:cb:
74:93:94:37:91:d7:fd:58:9b:36:e2:fe:84:ae:3e:
0f:ea:ad:3d:14:ff:c5:9e:b4:4b:f4:9c:a7:6f:ae:
ce:ef:71:4c:b5:bf:bf:93:b6:50:11:90:74:42:45:
4d:32:6d:ca:88:21:a6:60:7c:7c:cf:e2:2f:5f:b5:
b7:8a:0a:18:50:ee:e1:82:7c:d9:ef:f2:6d:ee:fe:
fe:99:fd:2f:e0:56:08:be:0b:7c:4f:66:49:a0:50:
de:0a:82:8e:d3:4b:7d:2c:78:27:3a:0b:cc:da:2e:
34:7a:4d:df:c7:2d:b3:2c:d8:8f:ce:96:5e:a2:67:
5c:4b:bd:75:08:c8:79:4b:65:72:4d:d8:ea:fd:4f:
84:19:5b:66:01:c9:33:64:21:21:f0:68:42:7a:39:
db:a5:7a:ea:bd:b0:d4:f4:f8:67:7c:b4:43:29:c0:
5f:78:bf:c0:b1:78:78:06:f5:8c:1f:f6:b3:17:f7:
54:28:43:c9:a5:e1:a6:1c:b7:20:5a:7b:e8:ff:6b:
31:ae:dc:51:ca:e8:38:98:3e:4a:95:1f:1d:bc:90:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:3E:73:BE:56:87:53:B5:E4:6A:CE:EB:B9:B0:66:CB:CE:BD:55
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:f6:a1:0a:26:70:f0:9f:32:24:8b:af:7b:46:75:3c:35:
d3:fa:88:f8:6f:9b:07:a0:dc:3d:bf:76:e0:a7:5b:6b:b9:74:
e6:da:69:62:0b:bd:a0:80:33:fd:5c:fe:23:98:f6:d7:0b:bd:
cc:28:f6:dd:44:8b:bd:28:fa:69:e2:78:ea:0f:3c:93:2d:b0:
de:4b:8f:33:dc:f1:ad:b1:a0:c4:4f:2e:cc:70:9a:bc:be:93:
2b:bb:09:ac:86:f9:64:b8:e5:9b:2c:45:16:0a:b3:c2:45:0a:
77:24:b9:4b:85:cf:86:ea:50:2b:ac:3a:fd:fd:83:68:18:3d:
27:b1:f1:bb:b8:3b:e2:a5:de:54:c6:68:cf:67:16:5d:c4:e3:
86:d9:67:3b:e8:18:32:97:6b:19:d0:e2:f5:8c:eb:de:e5:ae:
56:01:5e:c0:1c:30:f3:bf:09:e6:37:67:5b:82:a7:b2:5a:ed:
60:74:f9:11:0c:92:c1:75:91:fd:34:e8:14:c0:5e:8e:ce:b9:
75:00:f4:50:cd:82:e2:3d:15:eb:63:a3:03:37:06:36:b4:dd:
3b:42:42:76:2c:fe:94:eb:d7:42:70:78:46:3f:db:d1:5a:43:
9f:58:48:d3:54:29:bb:c6:6f:19:d2:66:06:d0:94:a8:a7:03:
74:65:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:44:59 2025 by rpki-client