Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: j7MOjrtiXANOw9IUAAxgaz7N0xQdxu6DmqWigWXNtp0=
Subject key identifier: C4:65:07:F7:F3:AE:76:9F:AA:78:0A:0E:A2:DF:A8:CD:54:14:D0:C0
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 019A50751A2C0FCBE8BF2F43A8547E87E263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 018A
Signing time: Tue 04 Nov 2025 20:00:42 +0000
Manifest this update: Tue 04 Nov 2025 20:00:42 +0000
Manifest next update: Wed 05 Nov 2025 20:00:42 +0000
Files and hashes: 1: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: +mJ7OH1qYs8BFx4DSL7n8oQnLvKaZzHEPraaStSzKGA=)
2: l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa (hash: fwZNajA2NrVuCxC49gzHtXDb0A0DV7JtszLe3wSG/eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:1a:2c:0f:cb:e8:bf:2f:43:a8:54:7e:87:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Nov 4 20:00:42 2025 GMT
Not After : Nov 5 20:00:42 2025 GMT
Subject: CN=c46507f7f3ae769faa780a0ea2dfa8cd5414d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:8f:06:49:76:8a:6b:57:34:c5:74:d9:f3:
74:05:a5:c7:3e:b5:cf:d5:8a:6f:b4:ec:40:0c:68:
dc:a7:f4:f4:1a:fb:7d:66:b5:19:64:ee:31:2c:64:
c0:81:b8:26:20:c4:e8:d9:24:3a:57:0a:3d:07:aa:
96:4e:9b:4b:be:e7:f8:fb:b8:9a:30:c0:f8:3a:57:
6a:af:12:72:25:16:f2:5c:15:f4:9a:ab:2e:67:57:
09:de:86:7f:8e:3e:fa:01:09:5d:16:1d:43:af:4d:
4c:8a:7e:80:e2:4b:cc:2c:06:ed:e4:69:18:63:3f:
37:f1:3a:2c:52:96:68:e4:4a:94:4f:45:1e:69:5e:
6d:56:f2:c5:72:b1:39:d6:1a:55:57:47:e1:23:51:
62:a4:f1:63:fa:51:c2:05:c5:c3:96:77:23:15:42:
71:40:66:c5:37:ab:60:41:ef:e1:ba:95:f1:47:c7:
11:ad:fb:e5:02:6b:33:bd:5e:d8:22:b6:10:6e:17:
4e:a5:57:ca:92:95:ab:34:a2:47:ee:1f:6b:9b:81:
9d:5a:55:cf:34:77:9f:78:0f:69:11:c1:05:ca:6b:
06:3a:c9:6c:99:b1:e6:e3:0e:77:cd:73:39:38:1a:
0e:33:e4:78:34:c4:0c:07:1e:b3:c8:1e:f5:84:51:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:07:F7:F3:AE:76:9F:AA:78:0A:0E:A2:DF:A8:CD:54:14:D0:C0
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0b:4a:e0:58:79:15:f6:50:3c:1b:c7:0b:81:16:9b:04:1c:
1b:ad:ac:22:f3:92:09:3a:8e:ea:a1:2f:62:e9:e6:a7:2b:f2:
73:13:f3:9d:4d:9c:46:82:2b:00:79:52:ad:b9:c5:45:ba:1a:
8e:1e:48:cc:52:7a:97:8e:c9:26:8d:84:8d:e8:51:5b:b8:ee:
fb:f9:68:97:d3:9f:24:90:45:20:99:a5:e8:b1:ed:c1:2a:1b:
9f:28:62:fa:99:f0:0e:95:4e:75:eb:9c:14:1f:ae:47:42:f3:
82:61:7b:1c:a6:f1:7c:47:85:a4:f3:a0:3a:b7:c8:18:0e:e9:
91:11:e2:77:80:34:94:e5:5f:a9:2a:3f:31:7a:8f:82:28:19:
bf:ce:30:c4:c6:96:a0:94:14:46:cd:37:9b:c5:77:70:8f:a8:
6c:97:23:50:7e:94:20:fb:b8:59:99:c2:22:b2:58:47:ba:e2:
0f:14:0d:98:76:db:71:7a:27:5d:77:12:d9:ce:a1:68:44:d4:
06:50:f1:00:ff:31:cd:67:19:94:73:ad:96:1e:8e:91:b6:5c:
ca:96:19:27:f6:26:e7:54:8c:0b:ae:1a:b7:a1:00:f7:10:fb:
5a:21:e9:e2:de:08:90:f1:9e:3a:51:ed:b4:bc:e7:33:ac:1a:
ff:60:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:35:43 2025 by rpki-client