Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
File: lb24W36o8fqvdR52xBR8gbYOmU0.mft (raw, json)
Hash identifier: 2dPGjehHy6bBs31gOSNoOG1zZhHrxN7DnZGxuOBPmg8=
Subject key identifier: C8:C8:D9:D6:1E:54:37:31:BE:60:C9:AA:39:80:F9:CE:60:6B:90:C3
Authority key identifier: 95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
Certificate issuer: /CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Certificate serial: 019A54BF73439A5DED2B28901B42F6A934EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
Manifest number: C3
Signing time: Wed 05 Nov 2025 16:00:24 +0000
Manifest this update: Wed 05 Nov 2025 16:00:24 +0000
Manifest next update: Thu 06 Nov 2025 16:00:24 +0000
Files and hashes: 1: 5R1-l58ft4GhxzonN9PpLF0e3rg.roa (hash: ld57U57oSYCdX19ANUoiIqFJmCosw0zLo2ypqpVfq5A=)
2: lb24W36o8fqvdR52xBR8gbYOmU0.crl (hash: Axta+Ng6R0qOuEPC+xvazj0fzLh0XQNyhGwn2J+q3sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:73:43:9a:5d:ed:2b:28:90:1b:42:f6:a9:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bdb85b7ea8f1faaf751e76c4147c81b60e994d
Validity
Not Before: Nov 5 16:00:24 2025 GMT
Not After : Nov 6 16:00:24 2025 GMT
Subject: CN=c8c8d9d61e543731be60c9aa3980f9ce606b90c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:df:63:fb:22:16:f5:b4:56:29:2e:e3:4c:
b4:fc:a1:08:c7:af:c4:51:6c:50:7c:ef:a2:d9:2a:
83:f2:15:8f:81:9e:a3:4d:f6:c9:51:91:46:81:17:
7a:ce:4d:07:b0:de:12:db:cc:43:34:91:f8:5c:b2:
dd:30:a6:2d:de:4c:6f:e6:6d:68:e2:20:8d:1c:3d:
90:1e:3d:00:4d:4f:fd:a3:4f:62:bd:fb:66:c7:fe:
99:ff:73:c3:98:66:ca:bb:7d:93:de:5d:2a:b4:48:
47:35:cf:09:dc:71:cf:fb:9c:b6:c1:7e:c8:df:e6:
2b:4c:47:c8:af:b9:80:07:e3:ff:9d:35:51:f0:60:
68:0d:9e:83:e8:22:fe:61:0d:72:4f:69:76:5b:27:
7a:05:84:43:84:c5:c7:18:e9:05:8c:b9:63:f1:e5:
ec:70:99:3b:e1:31:44:c3:74:5a:68:0b:f5:60:5a:
8d:f1:3e:f2:3e:2e:5c:a9:c1:9d:07:f6:eb:3e:3c:
9b:2b:9b:2b:47:0a:bc:60:8d:74:0e:b6:2a:8f:ad:
1f:a5:83:b3:fe:d0:c7:f4:1e:e3:aa:52:e0:a4:2b:
68:1a:38:ae:62:48:5f:9d:34:b5:b0:75:aa:1d:bd:
fb:13:5b:02:a5:de:cd:6c:08:45:6f:10:01:0a:0b:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:D9:D6:1E:54:37:31:BE:60:C9:AA:39:80:F9:CE:60:6B:90:C3
X509v3 Authority Key Identifier:
keyid:95:BD:B8:5B:7E:A8:F1:FA:AF:75:1E:76:C4:14:7C:81:B6:0E:99:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb24W36o8fqvdR52xBR8gbYOmU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/033700-f904-422f-a4ac-10240ca0b182/1/lb24W36o8fqvdR52xBR8gbYOmU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:46:2a:7b:2e:0c:26:44:6a:c9:18:ed:9c:ad:da:6b:84:15:
d5:95:72:5f:e5:fc:fd:a4:1c:d6:0d:1f:46:b1:89:8c:06:22:
a6:91:0d:e2:3e:49:c7:53:51:5a:83:2a:7b:af:90:d8:cc:e2:
30:b1:7d:05:ec:fa:34:a2:04:0a:b8:bb:19:5c:fd:9f:9f:b2:
77:77:bc:0d:4d:ab:ee:bb:52:44:c4:17:be:6d:0c:34:93:31:
82:ba:34:17:8a:16:21:c9:9a:34:f7:82:0d:f6:de:59:0e:48:
6e:95:de:94:70:3c:e8:9c:b1:90:b3:91:cc:94:bb:08:ac:4e:
bc:46:7d:fa:5b:90:8a:03:88:af:bb:85:bc:b5:29:82:1d:21:
b7:cd:91:1f:d4:ec:dd:d4:9e:c0:ab:c2:99:27:19:39:b1:64:
d9:3e:7f:31:94:6c:da:95:60:58:7a:aa:4e:51:5e:76:04:26:
2e:f8:af:0f:08:af:6b:d7:2b:b1:b1:f9:3c:ff:e7:30:b3:e9:
df:64:e5:ba:9b:c7:de:43:7a:e0:56:cd:65:10:c9:d4:3e:ee:
98:70:59:98:d4:52:ca:6e:4a:f0:da:b7:4b:3b:6d:ab:89:1a:
d6:c0:74:75:4f:d3:10:95:56:30:58:5c:f5:13:e1:eb:40:5a:
7a:55:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:21:38 2025 by rpki-client