Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: UJbiuMM+e9PzclHT9/it6WT/EjM0Fj8A2UF2kGW+msk=
Subject key identifier: 48:BC:A6:5C:3A:58:81:97:85:B5:9E:A5:46:AD:4F:76:A8:70:BB:75
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 019A4E86C89F98D7082C270E529F0E496D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 14C6
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: 7V5fsdWWO5ABihTMEZ7pWqmVEAg.roa (hash: sjf02gaMH9qnVq1MImDdr+8L+PTPlTd41f1Dyl1MZ4o=)
2: A65TnUmtXA-j8i8DxUwRZ8_asWk.roa (hash: p/RP3ssqQNnSyJpKYgAURBKI/osjrx7YvE9haXVstps=)
3: IEW1KRb6lmdmt9uvjKbJ7Vx4KOU.roa (hash: EE9BbonsKAKQ/4dVT210oiZKAUY97maNXHc53hj/8uw=)
4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: A53GRM2oQi0sYpyzNSMjnzQGjIoGaoi/IsNHlwc6sZc=)
5: xHmxHeGysZQx87yc0H9cuc2SvMo.roa (hash: j+Tf8Fn3tMX9hr31g+uEJglcEihEnhqHnvGsVUVKf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c8:9f:98:d7:08:2c:27:0e:52:9f:0e:49:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=48bca65c3a58819785b59ea546ad4f76a870bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:f1:5a:49:9b:70:a1:71:5f:40:46:2c:6a:
d3:f1:a8:ce:7d:c1:8b:c6:3f:c6:fa:80:35:03:a4:
ae:46:85:3e:81:6d:29:ee:61:1d:9a:3a:a2:3a:b5:
86:79:fe:d0:68:a9:37:4d:ee:09:e3:32:06:18:05:
8d:d4:57:6d:be:c1:dd:4e:c8:ec:95:1d:3d:ac:be:
f8:4e:d6:da:44:b8:f9:76:42:8e:17:74:72:bf:bc:
21:1a:28:68:83:ac:da:9f:20:a7:56:48:7c:0e:db:
9c:7e:04:20:80:10:c8:b1:8f:95:e9:7a:84:17:e3:
cf:38:3f:f9:2b:ce:ba:aa:d0:01:97:05:9e:f7:88:
2c:fb:02:61:a0:f1:03:99:67:22:3e:01:e8:8a:f6:
53:a4:39:6e:3b:bd:ca:eb:14:23:0a:0c:58:91:9b:
57:ee:ae:91:fe:33:2c:17:db:27:b6:9b:4b:71:2b:
33:dc:7c:7b:40:57:ae:c7:75:bb:1a:16:4b:05:46:
97:b8:e7:ad:62:02:09:6a:d9:f3:e5:ba:e1:29:f2:
92:16:d4:72:62:11:ad:2f:0a:6c:f6:dc:0b:36:4a:
2a:35:5c:a1:86:64:50:d9:bd:51:ef:73:a9:38:f1:
c9:4c:62:eb:cb:7a:c1:d1:eb:7c:4f:21:c8:4a:9c:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:A6:5C:3A:58:81:97:85:B5:9E:A5:46:AD:4F:76:A8:70:BB:75
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fb:32:e5:2c:6d:4e:85:19:3d:11:14:a4:91:30:be:d7:21:
ce:9b:15:cf:b1:25:71:17:db:e4:2f:c0:b3:24:65:96:4b:47:
59:e9:dc:d4:18:10:3f:69:d1:ad:05:01:1a:97:8d:ab:28:35:
b0:ac:a2:33:88:f8:96:44:2d:24:dd:e4:c1:d4:29:0e:a3:e5:
b1:71:76:4f:1e:be:1c:38:d0:4c:fc:82:42:9e:88:24:a8:21:
57:76:27:1b:71:71:43:b1:88:35:ec:dd:23:e2:29:0e:bc:c0:
97:e3:ae:ca:75:0e:8c:db:de:11:15:a2:44:bd:6e:e1:27:2f:
82:56:af:a0:42:28:3f:24:fe:98:b2:ea:0d:d5:e1:be:de:8f:
11:b8:36:dc:0f:37:51:d5:73:d8:82:5f:e3:30:7d:cb:52:f5:
d7:68:74:a5:29:0b:08:85:0d:28:e0:3f:97:8f:03:9f:1b:b0:
6b:5a:4b:c2:6c:e3:3e:53:0a:18:1d:b6:8f:2b:a5:74:3a:aa:
25:0d:98:b4:db:d0:00:e7:4a:23:51:ea:99:be:20:9d:18:b5:
3f:ab:68:09:1d:b4:cd:b9:96:3c:1e:bf:5d:39:19:7c:50:ed:
0b:62:25:ed:78:24:e7:5e:d6:ec:84:9e:0e:ac:3c:1b:d0:13:
27:ee:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client