Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: 92lst6q6XD4pFd5z/qF2gt52ljkVN6TR9BGNSBFLzvU=
Subject key identifier: E8:DD:30:9C:F5:55:6C:BD:20:01:DD:00:31:62:9E:42:B6:5A:D2:AA
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019A533F64C49DAA76DD15D05F1382E33F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 02C7
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: hw738pf256+YgMgtwAYky0VY4QmPvtddmMfKcI711Mk=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:64:c4:9d:aa:76:dd:15:d0:5f:13:82:e3:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=e8dd309cf5556cbd2001dd0031629e42b65ad2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:a2:9c:0c:0b:97:76:79:5e:5a:13:6c:e3:
34:3f:61:b0:b4:0e:91:8a:16:4b:ff:64:d1:bc:a9:
c1:0b:6c:f7:f8:5b:18:7e:67:df:ff:c0:30:f4:17:
8f:2d:50:99:88:c4:17:40:1d:69:08:2a:36:a2:da:
3d:66:76:7f:f5:d2:75:ae:b3:f2:90:9e:0c:b1:33:
9b:ca:6a:9d:d1:8d:71:aa:b7:f0:05:bf:a0:e6:4f:
db:a1:90:97:80:9b:a3:5c:ea:e9:9b:33:46:a3:c2:
67:5d:25:c6:08:09:34:e7:53:43:a7:6a:f0:cf:f9:
76:9c:e2:b9:11:e8:63:f4:42:65:e0:ca:ad:91:63:
89:c9:b9:80:ff:31:dd:07:45:e9:79:ff:74:14:3e:
fa:f7:65:76:14:f8:40:ab:1e:71:3c:72:a4:2b:94:
36:e0:c8:c3:e2:a0:73:f7:f2:e9:32:42:32:77:c6:
b8:6a:bb:53:ef:28:54:81:52:94:e4:5d:a6:ca:45:
55:94:99:74:47:78:b9:93:27:f6:5d:7b:ad:a8:b4:
1d:08:02:a2:16:0d:41:48:f5:5e:72:3a:9d:93:33:
6a:68:cc:e7:75:4f:96:92:86:04:b4:11:47:3b:1b:
ce:d0:e2:4c:78:24:83:9e:64:ad:0d:5b:f9:1f:2e:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:30:9C:F5:55:6C:BD:20:01:DD:00:31:62:9E:42:B6:5A:D2:AA
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9d:d1:7c:be:84:ff:50:8f:94:0d:e2:a1:04:19:9c:a9:4f:
71:95:60:d1:e9:c2:d8:78:45:8c:48:4a:38:ce:00:29:ff:72:
1c:66:c2:7a:d7:c3:51:28:47:66:b7:52:5c:27:85:23:2c:f8:
fb:a9:a1:07:ff:18:c1:81:5c:39:fa:d5:0e:00:e0:e5:67:50:
70:c9:c5:2a:d1:0e:fa:10:57:75:38:f2:9d:2e:7b:f4:c3:88:
7f:c7:77:ce:29:9a:4e:1d:56:22:50:69:52:97:34:09:fd:7d:
85:88:a9:75:72:f6:be:87:c3:02:de:cc:56:4b:72:82:68:ac:
37:1b:31:92:e4:b2:b7:35:b5:c3:83:cc:1c:f9:3f:61:83:bc:
59:77:d2:a4:6b:32:81:16:ea:be:55:1d:a9:08:3c:1d:12:8c:
91:d6:5c:d8:dc:67:74:15:3a:7e:cf:58:ba:48:b8:e9:70:52:
30:1d:65:d3:b6:c2:25:f2:5c:96:ed:ad:88:aa:3b:a3:32:71:
0c:c0:e8:6a:41:04:c4:c5:34:19:52:a2:33:8f:3a:dc:ee:68:
10:10:20:9b:b2:bd:b5:90:4f:ab:74:55:b2:a1:d9:69:5d:d2:
99:63:9e:61:0f:86:a3:72:f1:50:09:3b:5a:16:9b:ba:e0:9d:
86:09:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:18:04 2025 by rpki-client