Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: z1SFZns42VLpYCvAvtrPJ4mIn8Rn1jB66Kew/nJtLF8=
Subject key identifier: 00:1B:46:88:C8:99:55:09:7C:CA:6E:D2:28:A1:30:7B:F0:8A:C5:56
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 019A4EF57D011AFB6F53990B3BDDB30C9486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: 54HktHhMOV8ctUNW0ihXzW6BR6+/rsUn0zTiL0yN/Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7d:01:1a:fb:6f:53:99:0b:3b:dd:b3:0c:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=001b4688c89955097cca6ed228a1307bf08ac556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:d4:0e:b9:5e:7e:bb:e9:01:46:92:78:e6:
aa:16:b5:01:24:9b:98:1c:12:3b:b9:01:7b:dc:15:
82:3b:8c:40:76:36:43:94:1b:99:a2:0a:01:15:c6:
14:f4:b3:a8:ab:a6:55:5b:0d:b0:11:f1:ff:61:01:
30:88:8f:aa:c5:5a:95:40:af:19:6d:5d:a1:64:bb:
cc:cf:ff:39:cd:ef:53:c2:31:02:09:e3:15:3a:9e:
1b:62:b9:21:8b:4c:bf:26:31:8a:8e:06:a4:1d:cd:
f9:34:12:8c:56:bd:db:0b:e3:3f:09:15:74:e3:ee:
5e:e0:b6:21:f1:3b:b5:62:db:d2:10:75:6d:23:7c:
3d:0f:34:83:f9:4e:0e:bd:95:61:f7:a7:f6:72:1c:
c5:e3:c6:af:71:fd:e6:cc:91:05:be:99:8e:40:65:
61:da:d0:ab:ff:e1:36:27:20:96:65:b1:d3:b8:9a:
ab:50:99:43:60:35:11:f6:86:8c:02:b3:d7:58:cc:
3a:4e:77:dd:21:14:84:d6:15:45:30:96:ce:ba:16:
58:41:a0:4d:ae:34:ac:c6:0e:5d:3f:e2:9c:e6:f9:
7f:e5:ef:c9:da:70:94:d5:92:8d:db:97:dc:2f:80:
d3:37:c6:a6:e0:68:0a:44:e1:72:39:32:ae:c9:0a:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:46:88:C8:99:55:09:7C:CA:6E:D2:28:A1:30:7B:F0:8A:C5:56
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:86:c8:ae:68:ca:5a:ab:23:67:d8:dc:9e:97:7f:0c:b5:67:
e5:a3:91:9d:3b:65:2c:3b:dc:0a:cf:c7:58:4e:d6:05:ab:28:
a0:af:e5:46:a3:1a:d2:67:ed:fa:23:2d:5e:9c:f3:93:12:b6:
1a:8b:9e:cc:cb:74:ee:cb:2a:7f:03:8e:70:95:6f:a1:0b:f0:
0b:13:01:3c:a6:30:c5:89:96:55:0d:b5:c5:42:95:99:25:8c:
e2:25:a9:da:41:1e:12:d0:e8:06:10:d9:8b:7e:aa:db:88:6d:
3a:29:a5:65:65:8c:0f:46:ae:81:cc:90:cf:c4:f6:5d:8b:34:
15:19:c1:0f:77:08:ba:fd:d8:d5:56:50:d7:a5:7f:25:a1:a2:
c9:e9:e0:25:d4:1e:7e:27:c9:1a:b5:dd:17:02:65:26:ee:f7:
5f:94:6e:00:95:cf:99:4d:f9:2e:79:2f:46:c4:41:03:b3:16:
75:c7:0b:60:70:ca:54:78:26:e8:bf:57:6b:17:d0:99:8a:a5:
e9:50:a3:e1:12:fa:02:b7:2b:67:b1:82:04:e7:94:da:3a:bf:
64:87:c0:5d:fc:19:4e:ae:94:52:a5:6d:a5:70:ca:e7:8e:54:
64:14:43:ed:72:6a:d7:ec:82:9b:12:67:06:c3:40:39:1e:9f:
95:8f:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:56 2025 by rpki-client