Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: h0U1hN8AY5qtah3+e0TINRw7Wrd6krAILy7Aru9Ze70=
Subject key identifier: D6:5C:ED:A4:10:CC:34:EC:8F:72:9B:3C:48:00:28:68:3E:0F:D5:E8
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 019A5308281FCA2C0944094446D25937774E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: FD25R5okstTC0fX34tsQjF+73yBsQX30McoOaBmZPiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:28:1f:ca:2c:09:44:09:44:46:d2:59:37:77:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=d65ceda410cc34ec8f729b3c480028683e0fd5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:47:ea:f7:fc:76:53:d1:b7:fe:16:00:a7:
23:47:f1:33:3c:9a:15:47:1b:45:d0:98:42:c5:83:
48:fc:68:85:1c:e6:3f:34:1f:3b:2e:21:76:4e:35:
0b:53:a9:cb:47:8a:00:b3:f0:6c:37:33:b6:da:4e:
bb:f3:0a:58:fc:e6:09:42:61:97:21:cd:86:09:bf:
62:63:bf:16:63:e5:d9:a4:ec:b0:bc:38:3d:5c:01:
2b:7c:ba:43:24:9c:c9:d1:e0:00:a3:30:2c:9f:8b:
b7:f1:13:e9:aa:e0:7a:38:4d:9e:d7:b7:de:fb:8e:
46:ef:c4:a0:98:2e:76:a2:d4:57:87:b3:bf:13:70:
c9:5f:7e:2a:f7:11:ff:c1:f9:34:d2:f0:fa:54:20:
c7:8d:11:7e:ac:24:08:84:0c:ed:72:42:f5:c5:cd:
20:dc:20:89:89:b7:0a:36:8b:e0:19:31:d0:91:c2:
39:53:e4:68:18:e2:2e:bb:2d:75:fc:0d:a7:e1:39:
b6:51:c6:48:f3:b4:4f:e5:24:7b:7e:93:7f:7b:0e:
49:69:39:f3:52:9c:14:ce:98:29:fd:ad:06:6b:6e:
99:22:ff:a0:ca:71:82:e8:28:b5:d7:91:09:07:f0:
2b:cd:ad:20:20:16:b6:71:88:9f:02:c2:43:b6:d9:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5C:ED:A4:10:CC:34:EC:8F:72:9B:3C:48:00:28:68:3E:0F:D5:E8
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:dd:24:91:f7:fc:5b:34:5c:62:cd:aa:38:fb:c7:b0:53:
a9:3a:1d:62:b9:c5:00:5e:b9:f0:11:97:c9:c6:35:29:d5:2e:
63:2a:c1:b8:3c:16:38:ae:64:52:ce:47:c1:33:11:b2:06:42:
5d:88:ca:cd:24:0e:e5:25:a3:7f:4f:a2:36:c7:35:8b:38:23:
30:22:62:7c:f0:13:12:7a:5d:1a:76:24:14:d5:23:14:32:b0:
49:7a:d4:6c:1c:d6:2b:b4:4e:22:d9:f7:a8:ca:46:36:e5:ba:
57:ff:20:64:af:e9:25:91:42:09:58:2b:f6:8a:53:c7:c8:7e:
80:26:41:04:c4:52:29:be:68:24:4b:bd:b4:7a:7b:07:36:2e:
b2:29:72:c9:8a:02:e0:2b:5f:a7:f1:c0:29:60:9a:4f:43:ac:
fc:bf:88:02:4f:2f:e3:06:e6:dd:b6:50:6e:a7:8a:89:27:e0:
1d:fa:b7:b8:bf:2c:7b:b1:df:da:bb:f8:f3:a8:45:8e:33:3c:
f1:24:ad:08:7a:cc:1a:90:4c:de:4a:08:f1:14:24:b1:48:6a:
cb:6b:f0:67:5d:65:84:7d:19:01:ba:aa:5b:26:d7:a8:6e:fb:
4d:c2:0b:80:cc:a9:15:52:7a:17:7e:16:f6:de:a2:6e:3d:18:
73:4f:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:37 2025 by rpki-client