Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
File: LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft (raw, json)
Hash identifier: w7S3XpFqPOw7RM/L8DoWIbJphLAvleLERw1SvQtRSkg=
Subject key identifier: 0B:1C:C7:80:3C:09:64:A5:FA:88:75:05:94:07:13:22:C8:04:A0:50
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 019A559B504F9D40564A0D352D313ECC3310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
Manifest number: 1720
Signing time: Wed 05 Nov 2025 20:00:33 +0000
Manifest this update: Wed 05 Nov 2025 20:00:33 +0000
Manifest next update: Thu 06 Nov 2025 20:00:33 +0000
Files and hashes: 1: 01X6uEQds9Y9s0Nj6vCgByaYk4o.roa (hash: zRPbzdJELLZCFUdSNf06UKLGLPusehNC5YazUYIIsTM=)
2: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (hash: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=)
3: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (hash: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=)
4: FSPf9GPeE9OlDZ4wjRNl7LN012Y.roa (hash: qnw8o1IATV+jUOf4O3NJflnEbA239Ao6/8MIoEaYYAw=)
5: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (hash: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=)
6: LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl (hash: mBVUue5ecdtzaM9pzNgRJsCjyvSTccesD+n5Ul+xLIQ=)
7: ewUitY15BVRTKh0SmutPUcBQMXQ.roa (hash: B5ro7AbVa+pZeZWKqhB5vQ8tCOIi1/1KiBGVk/ZJiIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:50:4f:9d:40:56:4a:0d:35:2d:31:3e:cc:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Nov 5 20:00:33 2025 GMT
Not After : Nov 6 20:00:33 2025 GMT
Subject: CN=0b1cc7803c0964a5fa88750594071322c804a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:8a:8f:1f:77:4b:66:ab:1c:5e:eb:69:8e:
2d:65:df:91:4e:31:7b:6b:7b:36:f5:85:75:1e:ae:
75:26:57:91:87:19:45:1d:5c:15:54:9e:6a:ec:d5:
23:06:c2:de:b5:ea:ad:c9:1e:78:34:3a:22:72:0c:
a6:2d:4f:d3:89:96:3a:96:1b:90:ee:05:ac:0a:e0:
a6:74:31:26:6b:41:b6:73:77:43:d3:5f:64:fc:ad:
a6:05:fe:b8:f3:81:3f:0f:34:9a:cd:af:29:e6:5d:
dc:5a:43:df:1b:6d:6d:3d:23:9e:16:4e:00:08:7a:
84:6d:35:37:48:79:15:e5:a1:6b:35:c6:4e:49:4f:
b7:b9:07:e0:1a:e8:e7:b7:35:02:3f:f9:54:a6:50:
6f:f6:35:82:d9:aa:e7:c9:48:41:59:1f:77:02:1f:
af:c4:9d:bf:87:67:5f:1c:c8:c9:df:d9:b6:9f:c8:
4d:0f:1c:f4:f6:3b:6a:78:a7:09:f8:fb:42:d9:b7:
15:4e:fe:09:4d:9a:fa:88:e4:ed:d3:84:a6:0f:13:
58:2d:ff:8a:74:11:ca:6b:e6:e0:13:a2:d1:e9:63:
2c:b7:f5:07:42:60:fd:cb:fa:e2:7c:1f:b9:9d:2e:
b2:cc:07:88:85:f1:48:3c:0c:86:68:b9:41:66:62:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:C7:80:3C:09:64:A5:FA:88:75:05:94:07:13:22:C8:04:A0:50
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:23:b2:d4:05:62:56:28:78:20:a1:a5:fa:21:57:ed:be:
88:d8:3d:8e:82:fc:51:55:11:63:74:eb:4a:67:3a:7a:6d:0a:
20:5d:90:d0:e2:4d:2e:a6:6e:98:d1:b7:70:7e:3d:a3:2b:aa:
16:ff:9d:c3:1f:44:42:09:1f:05:d3:9f:96:b0:ca:31:38:7f:
4e:b3:3e:c7:ab:25:45:cb:0e:76:f4:15:a1:0d:32:88:c3:ba:
01:1a:1c:27:00:43:77:c4:bc:db:4e:ce:66:b7:85:ee:9d:1a:
1b:90:8d:80:14:f2:3c:85:cb:50:6b:25:c7:48:6d:19:23:62:
66:18:89:15:ba:a3:18:94:b0:7c:64:ea:1a:43:fd:2b:05:3b:
8c:96:ab:a3:48:b5:07:23:fe:ff:da:25:fa:97:76:1e:ad:99:
2e:9c:41:9e:cb:5f:a3:9a:5d:4e:45:f6:1e:30:ce:94:e3:15:
fe:5a:70:d9:2c:da:69:f1:d2:95:ff:d3:6d:e8:c4:df:22:64:
61:b7:91:6b:e5:3a:0b:1a:b8:eb:5e:bb:0c:9e:12:ed:d9:94:
f4:a1:01:fa:a4:34:8c:b8:71:90:b1:e9:ba:df:ef:f6:c1:38:
3f:4f:b4:4b:d6:b1:44:d7:1f:cf:f7:e1:8f:b1:1a:97:37:23:
0c:af:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:56:32 2025 by rpki-client