Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: IvIdkyoEF9xdafx5YfRH5iWFicSFHSCav1dj78u9scA=
Subject key identifier: F7:4F:11:3D:A8:96:EF:BD:12:1A:B0:3F:F6:50:57:FC:7C:22:8B:2D
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019A52D1AD4D0CE36024BE8DB2DA10764C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 14ED
Signing time: Wed 05 Nov 2025 07:01:04 +0000
Manifest this update: Wed 05 Nov 2025 07:01:04 +0000
Manifest next update: Thu 06 Nov 2025 07:01:04 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: FGw/Wn8PlZFYJVDU6K2huyyPZ+UNiEXYG/adlAnAYvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:ad:4d:0c:e3:60:24:be:8d:b2:da:10:76:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Nov 5 07:01:04 2025 GMT
Not After : Nov 6 07:01:04 2025 GMT
Subject: CN=f74f113da896efbd121ab03ff65057fc7c228b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:05:2b:97:a3:44:f8:e9:68:cb:68:6b:15:
d2:9b:29:69:15:e7:b7:b2:34:ab:0a:e7:e6:b9:05:
7b:71:da:b1:03:dd:b2:b6:20:ab:67:92:f3:8b:fa:
6f:5a:fc:fb:f0:27:96:86:05:62:cf:74:88:ad:35:
64:b7:4a:d2:6e:13:a4:97:56:67:3b:4c:97:70:55:
87:0e:5b:b2:89:54:65:56:2c:f1:cd:4d:29:92:5c:
53:74:d2:34:0b:ae:9c:c1:b5:6f:fb:d9:53:00:07:
d9:8b:f3:f3:03:ed:a1:b7:48:66:d1:e5:c2:1f:2e:
3d:e3:30:26:b1:c6:b5:4d:37:7f:7e:86:bb:f1:99:
53:6e:55:bb:71:d5:5f:be:e9:20:4e:b8:fb:aa:da:
77:de:cb:0a:c9:75:b6:fa:88:42:cc:dd:37:1a:e7:
bf:8c:94:06:7f:86:d3:e0:6b:13:2c:bf:5a:92:da:
ac:b9:82:7d:74:bc:8b:1d:23:fc:02:13:25:b3:4f:
e8:61:0e:b7:3c:b8:25:be:a1:2f:34:20:46:db:4a:
ba:8b:84:55:3f:65:37:d6:f5:91:d7:39:17:eb:0e:
67:b7:1c:2e:70:c0:2f:c2:b1:5e:d2:e8:b1:83:7b:
1a:0a:08:56:6a:aa:e3:91:20:84:3f:b5:f6:f6:3a:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:11:3D:A8:96:EF:BD:12:1A:B0:3F:F6:50:57:FC:7C:22:8B:2D
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:f0:78:1c:58:1a:ad:07:48:6a:89:d0:9a:07:07:f2:e2:
ee:f8:2c:b4:bd:85:d9:1c:d1:8a:5a:9c:ae:03:7f:a4:92:16:
d8:61:99:17:36:b9:8f:89:3c:f5:c6:c8:2e:c5:eb:da:f4:05:
3b:c4:d8:f8:ab:ff:db:7b:a0:fb:b8:ce:25:20:4c:23:0d:e6:
71:59:80:bf:a1:33:73:fb:62:35:19:39:8c:ad:e6:9f:47:5f:
23:f5:1e:f4:90:e9:bd:ff:92:1a:9b:38:99:96:e8:9a:c0:13:
54:20:e6:2d:b6:3b:00:17:ef:df:38:b6:96:8d:a6:be:68:0e:
8f:f2:3b:b6:0f:b3:d6:4f:37:87:19:3d:35:ce:ef:ac:94:59:
1c:3e:cf:3d:b8:60:4f:39:00:4d:b8:1e:1c:52:df:33:48:f9:
ef:75:a2:f5:3c:6c:ab:7b:d4:6c:af:e9:03:43:50:9e:3d:a0:
30:50:7f:b6:1f:70:3e:6f:16:60:c9:09:d0:22:82:82:9b:1b:
d9:a8:1f:0c:ad:71:38:17:e4:ef:5a:4a:a1:64:9e:27:94:9f:
ac:7c:18:f1:7b:f8:93:0c:3d:ca:78:0b:7f:2d:02:ec:08:5b:
71:c4:82:6b:c5:1f:35:8b:bb:2e:50:a6:82:68:bb:74:9d:ac:
88:b5:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:36 2025 by rpki-client