Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: KRCqzdAuSXBLEiOHuoeFJJ6vOFM3FVg6TULxGhivTAU=
Subject key identifier: 4B:96:9B:F0:66:73:44:33:C9:6B:F4:48:26:82:3D:7B:A0:83:0F:62
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019A4E187CDAE95A888A258803A2755F063E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 02F7
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: RJHBiGm3mRJbEo/gMypId8X386HIQD+/8yA7ooYe6qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7c:da:e9:5a:88:8a:25:88:03:a2:75:5f:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=4b969bf066734433c96bf44826823d7ba0830f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:d8:09:4a:79:9c:64:17:01:c4:b4:6b:01:
3a:ee:bf:1b:2c:80:3b:ac:cc:9d:21:60:b8:52:dd:
1e:09:d0:95:6e:88:09:d9:8d:ce:d2:c5:95:47:00:
a3:79:dd:87:48:33:9f:cd:5d:5b:23:a2:65:04:9d:
e5:4e:98:03:83:d3:c7:a0:88:aa:4d:d3:ff:6d:2c:
76:1d:0f:b1:0f:25:04:9f:d4:cd:ea:f0:40:96:65:
f7:18:92:1c:ec:c5:0e:df:0b:35:d4:6c:ce:b4:bf:
aa:70:96:1a:c7:4c:17:f6:f4:ac:62:3d:62:2f:bb:
b2:79:03:be:f9:c5:cc:e9:ab:57:ab:65:b1:7e:a3:
cd:26:c9:f8:78:d0:7a:fd:ec:17:39:c3:9c:c0:ac:
a8:e8:d4:03:ea:61:03:fa:26:f3:ce:80:1c:2b:8f:
67:30:30:3b:31:d9:b3:cd:6d:a9:07:e6:9a:07:3b:
31:21:41:05:4e:ed:45:a9:a3:f4:df:35:6b:22:74:
e2:2a:15:da:67:bf:62:b2:d7:73:c0:bb:cc:1b:15:
80:f9:85:f5:0c:8e:95:52:4b:94:04:cd:a0:11:49:
7c:76:fe:8d:79:1a:29:72:e1:68:6b:00:55:b9:17:
2c:dd:02:27:89:d6:6c:e0:14:45:33:88:a5:e6:d3:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:9B:F0:66:73:44:33:C9:6B:F4:48:26:82:3D:7B:A0:83:0F:62
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:48:38:97:0e:29:0f:8f:f9:17:dd:af:91:e3:fe:02:54:
b3:bf:69:99:1f:81:9b:b7:2f:8c:1e:0e:b7:9d:d1:0f:79:7d:
ad:7d:ef:6b:cb:26:8d:6c:ba:9a:a0:17:14:d8:cb:fa:58:0f:
70:a2:e7:05:8e:2c:c3:35:b1:02:c3:3a:58:68:ad:af:f2:01:
39:30:2e:0e:d2:27:41:20:01:36:f3:79:b2:7e:41:0c:23:38:
79:9e:d3:25:5a:c5:e7:e0:0c:41:0b:e1:bf:c9:7e:e0:71:89:
7a:37:01:69:cb:2b:d6:82:5e:ed:2f:3c:a3:97:63:dd:f2:66:
dc:98:d6:fe:5f:a7:07:d9:69:da:65:fa:03:0d:ad:71:40:62:
c0:8b:18:0b:3d:12:7a:b0:d8:ec:7c:22:90:f0:01:9b:8e:3e:
4c:f5:ba:2f:51:77:f6:75:30:f8:69:31:d3:4e:cc:1b:91:f5:
45:a0:1f:c5:88:a8:b4:0d:75:72:50:df:07:18:94:36:6b:59:
14:e5:7a:d2:04:82:27:11:08:8c:84:53:03:4c:c0:3a:a0:1b:
27:61:5f:ca:43:a3:07:b1:e9:86:29:45:94:b0:66:a8:59:03:
2e:17:d9:5e:71:5d:f1:79:1c:f4:3e:c6:a9:5d:de:cb:68:f7:
24:77:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:53 2025 by rpki-client