Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: tudhK/MkScwEOOHbfOZjEPr7ddMtY1j6pGHsWbHSeLo=
Subject key identifier: 9D:3E:11:5A:6E:36:75:37:95:59:F9:8D:13:53:F8:C7:93:C7:94:40
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019A4E86ACA1FB1C8C94760823F262E20605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0D99
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: pZkp/bqlo9suU8He9HRWw3qOC6oKO/2gc2B1ecM7fWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ac:a1:fb:1c:8c:94:76:08:23:f2:62:e2:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=9d3e115a6e3675379559f98d1353f8c793c79440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:7f:69:8a:0f:c5:31:a0:f6:12:d7:e5:cf:
80:56:02:b4:12:65:9d:1f:50:1e:8f:b7:8d:19:36:
49:fa:b8:c8:85:80:aa:c6:d7:d2:17:01:ee:73:5f:
28:d9:71:f8:aa:01:cc:30:49:14:6e:c4:ac:d2:85:
3e:4e:d4:e8:65:36:d4:fc:5a:2c:b5:61:8e:f8:f4:
95:82:ed:6a:00:6a:48:70:62:21:28:51:a4:99:9d:
a5:54:4e:ec:df:54:15:e9:62:5c:6b:54:5f:0b:cc:
ce:85:58:e2:0a:a7:18:a1:cb:0f:af:67:8d:22:9f:
eb:76:07:46:3b:af:d9:34:6d:0f:57:3e:55:3f:84:
fb:cd:e5:51:33:b5:95:df:9d:2d:0e:02:b4:45:84:
78:d6:e4:0b:52:e8:99:e7:fb:55:54:14:ae:5c:71:
28:04:e2:00:f8:b8:c8:01:10:91:cb:a8:f8:43:6d:
70:f1:39:5d:54:0c:8c:6e:0b:b5:b6:9f:49:ac:72:
67:36:48:74:ab:f4:e1:a3:ed:60:54:9f:6c:73:04:
a2:94:d7:4d:ab:58:46:7d:bc:8b:cc:d4:81:5d:9c:
14:2b:1c:32:15:6f:0b:e1:a1:99:f0:40:e3:d7:3b:
c8:49:7d:4b:08:e5:1f:18:9e:84:55:b6:c6:24:b0:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:11:5A:6E:36:75:37:95:59:F9:8D:13:53:F8:C7:93:C7:94:40
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:54:aa:ed:fd:3a:06:b3:8d:52:6c:d5:6f:2a:6e:2e:77:d3:
e3:3f:26:f4:fd:c7:92:4d:d5:25:41:db:21:de:83:ab:91:43:
6c:7f:2e:b5:20:0b:d0:54:ad:50:79:b9:f6:b7:f0:81:e6:2a:
c2:06:9e:26:0b:3d:16:3b:98:ed:4f:31:23:a4:0f:bb:8a:cb:
0a:b7:5d:0d:e3:fa:13:b2:09:40:9e:f7:fa:a5:fa:90:06:56:
44:13:f0:26:d0:62:b9:78:57:9e:17:d3:13:20:15:80:ac:42:
4d:32:50:88:8f:7c:36:1f:1d:ac:e7:66:9e:4d:cf:d6:67:5c:
de:98:8c:b7:56:1c:7f:87:c5:50:79:8e:f0:79:3f:4c:06:45:
d1:d8:7e:75:03:2a:aa:c0:46:f4:45:86:76:36:df:35:a1:e5:
5d:7c:cd:88:c9:8f:1a:5a:ce:55:3b:72:bb:72:4c:f6:fa:d0:
4e:f4:6e:5b:f1:6e:8f:7c:68:5f:71:6b:6b:42:54:69:ca:35:
15:fe:54:09:e0:6b:77:69:0b:35:7d:49:29:2f:77:09:80:2b:
be:04:c5:fd:f6:46:db:11:01:db:bc:c5:82:f1:77:b6:ba:15:
35:46:d5:56:ec:45:8a:4c:18:0f:ff:7b:e6:35:c6:89:b4:91:
e1:ba:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:27 2025 by rpki-client