Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: 7b1RhovPrDc11cssKOi2XffHlOcjI0wuXeYqYy/KTbg=
Subject key identifier: CD:E6:4B:88:51:BE:DD:D1:9A:E1:5E:8E:54:D5:3F:04:7A:25:78:FD
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019A50AB8455E5B723789FF97423F45B021C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 13E8
Signing time: Tue 04 Nov 2025 21:00:09 +0000
Manifest this update: Tue 04 Nov 2025 21:00:09 +0000
Manifest next update: Wed 05 Nov 2025 21:00:09 +0000
Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=)
3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: pYSRKSEXk5njWN9UH9eUWZ/4RYBuXd9LACLvBltxI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:84:55:e5:b7:23:78:9f:f9:74:23:f4:5b:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Nov 4 21:00:09 2025 GMT
Not After : Nov 5 21:00:09 2025 GMT
Subject: CN=cde64b8851beddd19ae15e8e54d53f047a2578fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:50:4c:9c:16:f9:86:e0:72:2a:4c:61:7b:
87:13:07:f9:33:34:77:07:e1:6e:40:a3:44:f0:e2:
bb:bd:bc:e7:c7:b1:9a:56:f6:85:4d:b0:cb:a8:1c:
0e:4e:85:e3:1c:06:15:aa:e0:9f:24:67:85:ee:e5:
da:39:56:1f:67:0c:bf:0c:88:23:86:92:e7:6e:92:
8f:df:d4:be:a1:6d:67:bb:4d:88:7d:bb:d8:a8:55:
ea:d2:1f:4f:d2:5e:9f:be:f7:95:b8:ea:45:91:25:
fe:74:c7:51:5b:8c:36:01:89:cd:ef:05:8e:d0:07:
f9:8c:27:ff:78:e1:8d:8a:d2:da:e6:fc:69:56:14:
e1:a3:32:da:bf:83:71:3a:62:ee:68:16:c7:03:b2:
df:d1:53:6c:13:0c:bf:fc:b7:1b:73:f1:8b:fb:06:
48:1a:9c:1e:5c:1e:88:2b:24:d0:1d:83:dd:23:ee:
71:f9:ce:85:5b:6e:4a:49:7f:44:bf:4c:47:1a:cd:
28:17:88:7b:ab:25:ec:a4:44:a0:d2:10:1e:d4:cf:
62:ee:ba:c4:0f:bf:41:f0:b8:5b:96:fa:3f:28:ed:
df:f7:a8:89:3c:a0:71:19:44:86:38:5d:98:16:40:
ff:c3:42:af:8f:cd:dd:d6:bd:c5:3e:cc:de:58:fe:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:4B:88:51:BE:DD:D1:9A:E1:5E:8E:54:D5:3F:04:7A:25:78:FD
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:5e:8c:98:2c:c7:e7:1a:4e:4a:62:71:76:60:29:1e:d4:
b7:f3:58:84:62:3d:d2:0d:1e:b3:13:a9:0c:b5:2b:e5:af:8f:
bc:68:d5:c0:16:9a:b8:83:42:41:a5:17:51:3f:67:a7:64:1d:
11:6a:14:a4:c7:20:d1:19:58:c8:86:37:90:39:87:fc:51:6f:
3b:67:58:8b:08:b3:ac:17:12:c9:17:cc:e5:b6:38:0b:9d:4c:
69:c4:80:36:cc:ea:67:8c:17:4b:22:f3:23:50:5b:d5:dd:f8:
8b:fe:01:60:c2:1a:0d:bd:0f:c9:01:4c:00:27:39:e3:dd:12:
ce:3f:97:14:48:52:e1:2b:68:22:b3:f8:65:1d:a2:ca:f7:8f:
b9:5e:e3:e7:83:4f:11:41:e0:3d:82:03:49:f6:cf:fc:74:d8:
e8:28:31:a9:69:45:bb:d0:f5:6e:3d:0d:cf:94:cb:8a:38:c5:
21:1c:04:4e:43:fa:66:cc:62:43:a6:85:06:12:8d:b3:43:37:
fc:3f:da:10:94:bc:f1:54:41:88:98:cc:b6:e8:df:12:6a:95:
e6:e4:8a:d6:f9:85:57:24:a5:0f:3a:4a:f7:d1:ef:70:af:97:
a1:5d:42:3b:c6:48:e0:2b:d7:63:a0:0e:08:c1:45:6e:29:6c:
10:87:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:17 2025 by rpki-client