Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: el31xvNYyU+RnJbe7u39z56SMrdcS05WxYuB0Z4XQ7k=
Subject key identifier: 3D:62:1E:D8:3E:DF:44:C4:12:ED:3A:97:79:24:2E:97:36:70:0E:0F
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019A4F2B8554C81A9EC9D4A6CA0501FA3AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0EC5
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: OgsmXsvB4wEnsT1rTAegJUEK/6z3X/IGIlcIAT498AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:85:54:c8:1a:9e:c9:d4:a6:ca:05:01:fa:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=3d621ed83edf44c412ed3a9779242e9736700e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:39:8e:c3:1d:6e:a7:e4:ec:b6:85:70:bd:
92:4d:af:66:06:4a:a3:41:d8:23:88:4a:21:e5:91:
17:bb:d5:7b:9b:3a:7f:13:9b:da:83:bb:55:6c:e7:
18:d2:25:ee:a5:78:eb:a0:85:2f:94:d2:2f:42:62:
04:0a:a6:9b:cf:b8:b8:a1:71:2b:82:e7:29:ca:d8:
ae:d0:5b:b2:3f:95:12:10:ad:a5:c5:62:57:b1:dc:
72:3b:5b:92:ba:16:dd:6c:e0:5f:20:41:f6:a7:67:
fa:5a:52:68:a8:ed:e1:26:fb:22:c2:c2:21:50:1f:
ac:04:ba:88:b3:09:22:30:67:e3:2b:6d:3d:76:66:
1c:c7:51:3b:12:7b:77:f3:ab:f5:88:e8:55:f5:10:
50:45:67:ed:32:7f:52:fa:4c:ec:1d:ef:fa:97:1f:
f1:28:4d:68:9e:b0:e5:85:67:bb:be:3d:20:34:6a:
27:8c:97:79:ff:b5:6f:1a:96:fd:9e:cd:13:34:60:
ed:ff:37:3a:c2:85:9b:d0:73:33:c2:35:94:4a:72:
b7:22:6d:0c:ec:2d:53:45:15:f9:0f:b1:8d:c1:44:
1c:98:1f:61:f8:5f:b2:94:1a:a9:2c:5a:13:f2:59:
61:f7:3d:c1:3a:8a:e4:91:26:e6:1a:80:0a:97:6f:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:62:1E:D8:3E:DF:44:C4:12:ED:3A:97:79:24:2E:97:36:70:0E:0F
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:95:8f:23:3f:bc:cf:88:c3:52:fd:65:91:da:16:e3:6b:
ea:c8:cf:2a:8a:fb:0f:ba:ec:12:5d:20:07:45:84:3a:2c:62:
e2:65:25:f6:7b:4c:6f:1f:c9:98:d8:e8:69:b4:93:2e:2b:05:
f2:e8:64:3a:18:98:fe:99:ca:f9:9d:e4:e8:8d:7b:53:d8:2d:
85:fb:e3:d5:81:f1:11:86:48:d5:4d:c5:7c:6e:d8:9b:bc:97:
02:88:ae:0b:48:a6:7e:29:ae:e4:d1:eb:b5:33:b0:ca:f0:69:
86:03:60:91:4c:c0:37:34:ae:5f:58:25:b0:44:a6:45:23:4e:
51:58:88:c9:4c:d1:ce:50:94:71:b3:21:3f:86:0b:56:fa:f4:
93:4e:94:56:39:00:8d:17:c3:ed:15:fe:71:6c:f5:60:b0:33:
79:2f:8b:09:eb:63:b4:d8:4f:33:55:8d:cc:e5:62:a6:01:17:
82:7b:9e:b4:3a:1a:7e:3c:8e:b4:3e:7e:c1:e5:a1:28:1b:5e:
d7:0c:35:c3:7d:9b:33:b4:79:c9:8b:0a:8d:8f:43:ff:9a:b2:
e5:08:f4:47:b1:01:14:68:79:fc:a7:61:4a:d3:6d:d4:95:38:
c3:03:cf:ff:8d:bf:0b:a3:d5:6b:e2:bf:ea:70:35:76:0f:67:
22:3d:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:57 2025 by rpki-client