Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: vvUdhTqxBub6ubG3sQVfiBeYeZ5dGdqHPek9EaUk3fc=
Subject key identifier: 27:3F:12:A8:D1:A7:BF:ED:9E:8F:CE:29:B0:C9:A2:40:87:39:D7:7C
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019A4EF4B74EB251C61935861FA3D869296C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 13:00:51 +0000
Manifest this update: Tue 04 Nov 2025 13:00:51 +0000
Manifest next update: Wed 05 Nov 2025 13:00:51 +0000
Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 7m7gnd3yK2Jpb9o8Z5rHh0b1GDBCa95OKkamhI8bLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b7:4e:b2:51:c6:19:35:86:1f:a3:d8:69:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Nov 4 13:00:51 2025 GMT
Not After : Nov 5 13:00:51 2025 GMT
Subject: CN=273f12a8d1a7bfed9e8fce29b0c9a2408739d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:e8:c9:d2:95:70:86:eb:7c:fc:69:61:bd:
c1:a7:fd:65:f3:20:94:e5:17:be:6e:03:87:7c:bd:
b9:6e:2b:2f:b0:07:6c:90:f3:7f:a9:0c:bc:8d:d5:
5b:6b:2e:28:24:94:26:5a:ba:7f:40:bc:df:6d:f9:
03:8b:48:37:cd:24:34:4e:80:e7:76:6c:fd:0b:87:
e3:32:d4:e8:a9:7b:4e:f5:d1:bd:fe:33:a7:aa:d0:
da:ea:7d:4f:78:31:4d:5a:f2:35:05:c8:40:e7:9c:
0e:3a:84:c3:6d:ec:5e:7a:f9:cd:7a:36:8e:f5:c8:
aa:e9:64:f4:8c:97:2c:48:e6:c5:bb:5f:f9:44:08:
48:25:07:5a:15:64:14:35:87:b4:8c:e7:ce:19:0c:
22:51:8b:56:30:ba:95:38:47:01:ad:65:d6:3c:16:
e3:dd:91:b6:67:8d:3c:a5:d4:ab:2c:76:9a:d0:f7:
84:fd:c9:08:cd:46:44:9c:df:6b:c3:58:f9:6f:e4:
9b:7f:ce:c4:9c:f7:15:fc:d2:65:5f:21:13:20:64:
db:f6:f6:bc:88:de:4d:1b:45:f3:af:4f:b6:0b:8a:
76:1c:1f:be:18:9c:54:0d:03:92:15:74:bf:97:d0:
0c:61:f2:6c:48:d6:02:04:f7:fd:a0:75:27:19:48:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:12:A8:D1:A7:BF:ED:9E:8F:CE:29:B0:C9:A2:40:87:39:D7:7C
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ce:97:f1:47:88:94:b8:af:90:9f:61:39:1d:52:ff:c4:ad:
2d:28:9b:ba:e7:6b:60:08:ed:67:21:3e:0c:54:32:c8:b1:fe:
41:5b:b4:b0:f8:aa:18:ed:29:22:61:50:68:ae:39:43:69:fc:
73:3b:41:b3:73:7c:cb:9d:03:1d:fc:85:3d:fe:48:ad:a7:54:
2a:b0:6a:88:86:63:08:98:93:46:59:ce:1d:d7:63:29:ba:7f:
0d:d5:3a:46:32:f7:61:ea:97:50:09:26:14:e6:82:73:27:be:
4d:e8:41:6b:84:f1:5b:26:54:8e:3d:05:70:d1:06:97:5d:1f:
52:1a:61:1f:1e:c2:db:5e:55:e1:b5:80:2c:62:f5:f1:47:d7:
a4:86:38:4f:42:83:97:83:aa:6b:25:2d:45:06:73:a0:84:7d:
1a:0b:36:06:5e:58:d6:ac:ff:66:2e:45:8f:44:bc:8b:89:ef:
8d:00:5b:04:fa:d8:ee:77:3d:7b:17:d9:7f:e9:59:b4:06:d7:
b4:23:35:37:ed:93:65:08:66:64:97:16:50:77:65:98:cb:e2:
df:d8:7c:d5:ab:28:16:03:75:21:56:20:f1:5e:6d:24:f6:ce:
ad:6b:0b:9b:f3:f8:a8:8d:6b:45:7a:bf:f3:b3:c6:51:41:e3:
9a:ce:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:15 2025 by rpki-client