Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: ge/5uV71mGN6IB4AmLlPT+DNiv2YoJN+wLIQ1woluY0=
Subject key identifier: B8:C6:39:D3:D7:1F:DE:50:00:D0:BE:A4:A0:D0:ED:B4:3E:E1:CB:67
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 019A4D06F3FA007F152BCCB9C86E7D46F936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0428
Signing time: Tue 04 Nov 2025 04:01:32 +0000
Manifest this update: Tue 04 Nov 2025 04:01:32 +0000
Manifest next update: Wed 05 Nov 2025 04:01:32 +0000
Files and hashes: 1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=)
2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: 74H09Yrzfxx91oRENTTo/tfnzcYoIbUtW+Clao3I+TM=)
5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:f3:fa:00:7f:15:2b:cc:b9:c8:6e:7d:46:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Nov 4 04:01:32 2025 GMT
Not After : Nov 5 04:01:32 2025 GMT
Subject: CN=b8c639d3d71fde5000d0bea4a0d0edb43ee1cb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:8d:9b:cd:5c:17:48:ac:a2:3c:e7:e6:e0:
93:27:3c:68:70:69:54:e8:27:b5:72:75:bf:80:c9:
21:c1:9b:df:5f:9b:b2:a6:f1:55:df:c5:e5:15:21:
53:88:de:2b:d3:1d:2a:20:13:42:2e:9f:5f:57:cd:
fd:e9:ac:24:06:27:34:9e:34:a2:01:96:f6:0e:a4:
93:a3:f6:87:f8:6e:1f:66:5a:9c:46:36:64:7f:f6:
42:49:d4:8c:a8:9c:2d:6a:f4:12:2c:78:13:fd:77:
c5:e4:88:0a:ee:64:ea:eb:df:28:b0:b8:53:ab:d0:
5f:27:e5:9a:3e:38:ae:27:13:cc:2e:e1:9e:12:69:
60:48:7a:61:5a:e4:b2:44:50:fe:7a:e4:8d:2e:e3:
2c:1f:e0:cb:d9:ae:66:bd:de:80:9a:41:86:7a:70:
d1:6b:fc:5b:23:2e:43:11:b8:1a:a5:8a:ee:b7:6c:
15:c7:83:7f:d7:49:9b:a5:e6:50:7c:6c:f2:ef:2e:
40:e5:4d:c5:a2:ef:b1:a1:83:80:0a:46:e3:2c:24:
cd:da:a5:2f:d0:89:73:a9:a5:de:44:7b:28:88:b9:
59:ba:60:a7:9b:a9:38:fe:d5:8e:b0:4f:79:25:60:
ae:2b:5b:81:d4:eb:e4:5c:12:f9:3f:0d:7f:14:0e:
c0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:39:D3:D7:1F:DE:50:00:D0:BE:A4:A0:D0:ED:B4:3E:E1:CB:67
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:53:8c:27:6d:c9:5e:2f:dd:a7:18:8f:aa:3b:5c:a9:80:
60:e6:fd:d1:46:db:5d:be:98:39:a4:e1:bb:6e:e7:46:51:fe:
93:cb:ab:f0:73:87:a3:3f:17:67:6e:ef:c1:9d:ac:26:be:44:
e6:93:67:45:ef:f4:57:a8:03:02:e9:23:11:82:24:f4:39:a5:
9d:10:38:9f:b4:b1:fe:4a:1f:3e:51:f2:9f:3c:ed:76:47:9f:
11:7e:aa:75:17:9a:02:2b:1c:19:8c:23:28:ea:d3:52:15:89:
59:db:f5:1f:46:28:ff:c6:b1:c6:37:2d:cd:96:3f:3c:a4:84:
a1:33:7d:06:94:e2:c0:b6:60:1b:c6:00:8c:56:00:5a:ac:19:
9c:d8:4f:db:b4:1d:0a:16:a5:f1:c0:70:96:48:b3:13:eb:4d:
6f:10:9e:30:67:0f:db:ab:8e:40:f1:5b:0b:fc:1c:d6:b4:02:
24:3f:2c:cc:31:d2:e7:c4:1f:05:1a:6b:de:b5:02:12:be:21:
06:1e:65:b3:3c:f9:ae:37:3a:80:ae:64:c6:f9:64:b2:83:b6:
82:48:7d:6d:7b:e4:12:a0:cf:5e:04:1e:7c:45:f9:4f:87:44:
a1:ce:f2:f1:a6:5d:ce:f1:2c:ca:79:bf:91:59:cb:2a:f6:0c:
63:2c:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client