Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 0dTwVsU5veBWRYWUo9S5z2McyS9iZOs94DkmuNbCeA0=
Subject key identifier: 27:48:33:C7:30:6A:F2:F5:5A:1F:30:54:AB:0E:5C:37:A8:EB:BE:01
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019A52D0F4FCBD32BF6F4CD426D2D1D5516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: IJhslGOkrW2Bpd89nH0nX2CZxlV/I2D5GKOqGli2blA=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f4:fc:bd:32:bf:6f:4c:d4:26:d2:d1:d5:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=274833c7306af2f55a1f3054ab0e5c37a8ebbe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:41:19:4f:a5:02:bb:83:aa:7b:62:9e:dc:
49:13:da:40:e8:b0:94:66:3a:89:41:42:2b:b0:28:
e3:22:55:19:36:de:3f:0b:b0:e6:19:56:42:31:a6:
2c:73:37:65:bc:76:b6:d3:c5:ab:3a:b2:ab:da:a7:
3a:ff:22:7a:b4:2f:2f:5a:ad:c7:a1:10:32:e4:7b:
2a:e0:65:a2:b4:0b:62:9b:d6:d8:6d:1a:53:bc:22:
7f:e5:c6:49:11:3b:b7:b6:0d:36:7a:45:90:cc:9e:
7a:67:4c:38:04:dd:b6:a7:61:3d:f2:19:5a:ed:1d:
e6:8e:c2:47:3b:39:ea:8c:88:27:ed:3d:bf:7b:01:
fd:41:54:78:d9:c2:fa:ec:64:15:1f:d0:3b:48:68:
36:48:08:25:44:75:3d:89:fe:77:1d:7b:37:bc:00:
e6:cf:5d:f9:02:55:5c:f1:d6:2a:66:3b:38:bb:dd:
f7:3e:2c:d7:02:2d:d9:c7:ab:d2:a9:ca:ed:4c:ff:
58:7f:34:f3:80:6c:6b:ec:3e:ef:89:78:8b:93:49:
6b:21:44:85:41:f8:22:7a:b0:d3:c1:f1:cc:3e:51:
9f:fa:92:5d:b5:b6:3b:86:7c:d0:d1:39:4b:b4:c5:
62:20:ee:79:f8:96:67:c6:04:35:b4:e2:d6:d0:d1:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:33:C7:30:6A:F2:F5:5A:1F:30:54:AB:0E:5C:37:A8:EB:BE:01
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:cb:3c:bd:98:ba:85:40:44:5c:09:de:79:06:ed:dd:9a:
fb:aa:5d:f1:da:d3:5f:4e:a5:d7:c9:40:f3:a4:7c:2e:5b:2c:
02:10:0c:b0:70:79:ac:e3:1d:b4:77:ed:7f:e7:9f:a4:eb:29:
c4:c6:38:ea:02:21:e1:80:64:22:78:c9:ca:f1:0a:79:21:44:
15:46:ac:fd:47:9f:b1:4e:4a:dc:9b:8b:e9:49:33:d7:5b:4a:
96:3a:89:5f:11:65:88:8d:38:22:7c:dd:b3:f6:eb:c1:bc:47:
92:02:af:e4:11:05:40:76:f6:2c:c6:8b:04:7c:eb:54:77:a8:
66:1f:76:6a:cf:65:38:d9:a5:b8:40:b3:26:98:ea:f9:b3:90:
c2:31:f2:f7:10:58:43:b3:17:a9:28:96:76:f2:fe:70:2a:0c:
e9:c6:ce:59:ea:d0:3d:86:4a:12:c4:7e:d8:38:f9:aa:09:3a:
9e:23:23:e8:53:4f:2b:f5:74:32:e3:2a:a6:4f:d2:61:30:50:
96:9f:15:07:8f:14:cf:39:39:77:f8:ee:ac:cc:1e:48:8f:bd:
5d:87:ea:98:74:cf:a4:76:6b:e4:db:cd:d8:60:13:e3:3c:f5:
06:3a:ae:18:33:30:28:77:03:d3:df:f8:86:85:7d:3e:14:92:
ab:ad:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:07 2025 by rpki-client