Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: 9tt9R8Ea4fnDvcjkkVqLUBARuD9R4SruczfK76p8D+s=
Subject key identifier: ED:5A:9E:8B:FA:1E:05:8E:B9:77:48:CD:55:63:5A:91:24:E1:A4:48
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 019A50752A7CA5DC25D4C8105FF8292EC8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 20:00:47 +0000
Manifest this update: Tue 04 Nov 2025 20:00:47 +0000
Manifest next update: Wed 05 Nov 2025 20:00:47 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: Sx9nssXv9N2bwmbk2Tt60aBO0SALfXBqEy48lD/YvAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2a:7c:a5:dc:25:d4:c8:10:5f:f8:29:2e:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Nov 4 20:00:47 2025 GMT
Not After : Nov 5 20:00:47 2025 GMT
Subject: CN=ed5a9e8bfa1e058eb97748cd55635a9124e1a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:c8:fa:21:7c:f8:ee:1d:cf:ff:2d:84:8d:
39:fa:c3:e9:b7:27:ea:0d:cd:a3:e2:a5:4b:4c:e2:
f1:19:96:3f:6f:d6:07:b2:f8:8a:1b:be:2e:bd:58:
b7:53:23:82:5f:f7:63:28:9c:7c:6f:b3:10:0a:3d:
bb:9a:0a:c5:72:47:30:3c:b7:32:ae:de:f5:74:ce:
c9:5a:8b:ab:84:75:09:49:46:44:70:49:7e:25:79:
4a:40:68:a7:6b:05:6c:ef:1d:9a:05:fa:05:7f:ec:
56:52:16:ad:9c:64:71:1a:90:59:f4:bb:c4:4c:c4:
ee:e1:12:4f:a9:94:28:82:bf:1f:ab:47:c2:7a:64:
10:80:16:07:93:86:6b:94:66:32:b8:5f:98:14:4d:
a5:8c:58:43:5b:64:9e:ee:c0:b2:5f:b8:01:79:6a:
b5:2b:2a:f5:ce:35:58:b9:a4:c5:11:fc:ef:5f:7b:
1b:94:4e:3e:a5:71:1f:06:43:ba:cf:1e:a9:4a:4c:
0a:78:e6:ae:7e:d4:1a:2a:4e:4e:75:cd:a5:48:f2:
6c:65:21:51:50:6e:01:4a:7a:ba:c0:57:3a:69:b0:
70:b2:58:15:62:49:b6:fa:8a:87:af:aa:3c:0e:a5:
68:8a:7a:b4:ee:23:32:1e:61:0f:e9:62:b0:75:f5:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:9E:8B:FA:1E:05:8E:B9:77:48:CD:55:63:5A:91:24:E1:A4:48
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b7:36:f1:b1:6e:bd:62:b6:d2:f6:78:ad:15:9e:53:57:1e:
3b:7a:c2:73:f9:a9:7d:44:81:75:5b:43:08:36:68:91:40:b8:
c2:2a:8d:39:1d:3b:aa:e1:11:0b:44:35:36:2d:2b:01:d8:be:
bb:2c:81:6a:d5:20:bd:74:50:74:c7:6b:b1:3f:4a:44:78:cf:
65:de:93:29:7c:08:c0:88:83:2a:0d:11:c2:0d:21:fb:c4:0b:
d3:f8:2d:43:af:6c:f2:6f:be:73:22:ab:d8:c0:81:ed:ca:61:
ee:8a:f6:47:91:4d:52:96:cc:ff:ee:08:21:bb:0c:6a:a3:28:
09:5b:44:32:53:2b:85:c6:a6:28:5c:53:ee:05:3f:de:50:90:
13:74:fe:ad:29:24:6e:9e:9b:50:d8:dd:db:7d:d9:e5:47:0d:
9d:2a:6c:be:99:47:c7:a2:24:d1:92:81:b3:5a:4e:4f:20:d4:
0b:0e:c2:0b:dd:75:02:6d:ad:6c:c6:97:f6:9f:82:a4:ac:a2:
e3:47:ef:d8:88:11:a7:4f:fe:4f:2d:09:3f:a3:65:b4:ed:31:
ce:69:e5:9e:0e:3d:40:c0:55:5d:dc:7a:6c:ec:3e:78:ca:46:
eb:eb:e4:40:e6:81:ca:a2:46:3f:7b:c0:8d:30:f5:d8:9d:a5:
68:a5:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:19:15 2025 by rpki-client