Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: K/CL7+IwSOV9IwCbgXJGnPnpPafwiqBFdahE1Xgzb2s=
Subject key identifier: 31:86:F5:71:B2:6E:5D:B2:63:22:D6:E7:B5:89:66:61:7A:B6:02:4F
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019A5074B349405B9A1B700ED1D43EA6D1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=)
3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
4: gi5eF85DS2YJELAZM_ySYFsKV08.roa (hash: MIgOllfsmrhmY3owqBnBM3hgcAd1OAro3szJ6UxB+Hk=)
5: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: n9f0b2DQxL61054S7WjoCRhyJ1tIlTBIYrTUzgO7ZF4=)
6: pczhsUKGHELIQkg7tKT9igyRi-A.roa (hash: Y7SOjOUl6Opwe6kgzkQEfHKGoUu9pf1pYRSzuMhv1S4=)
7: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b3:49:40:5b:9a:1b:70:0e:d1:d4:3e:a6:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=3186f571b26e5db26322d6e7b58966617ab6024f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:18:80:16:6d:c6:5f:8f:78:4e:86:85:c6:
6b:df:69:91:35:1e:58:79:7f:c6:93:a5:d0:cc:11:
ff:b5:e4:a3:93:35:24:14:c2:f9:6f:29:df:be:9f:
fb:c8:cd:b7:49:f0:8a:d0:ae:d7:88:9a:02:3f:1d:
f9:03:c9:f8:99:d3:b7:13:97:0c:5f:a4:40:de:cf:
da:f0:01:8a:7b:ec:b2:41:2a:27:c8:ad:f4:2b:fa:
ea:3e:db:84:f0:51:0e:a4:54:8b:45:78:f2:eb:f9:
7e:5f:7d:aa:46:54:38:21:2e:3f:e9:c1:04:c7:16:
30:0d:e7:c0:57:95:33:76:38:a3:ac:95:27:6d:4b:
87:e0:cf:cb:72:2c:93:20:47:c5:73:91:77:96:71:
cd:a9:50:08:b1:01:0e:1e:15:50:db:5f:2c:50:07:
77:05:72:16:b8:e1:19:dc:99:a1:f8:25:2c:ee:6e:
4e:39:fc:92:67:4f:f0:9b:10:c4:bf:a3:a4:22:89:
aa:88:18:5f:05:29:d3:0d:44:80:57:b7:71:df:cf:
54:62:05:5b:6b:a1:dc:8f:8f:8f:74:b9:92:87:6c:
8b:7e:8a:6a:4a:e2:fb:56:25:40:35:18:35:56:77:
2a:8f:17:2f:27:4a:18:db:e9:ab:b7:cc:ad:ff:5a:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:F5:71:B2:6E:5D:B2:63:22:D6:E7:B5:89:66:61:7A:B6:02:4F
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:48:91:b5:50:f2:17:9b:cf:07:39:e7:9f:10:36:61:f4:
c8:ba:32:94:b1:4a:d6:c7:40:41:e0:7e:5d:6c:0b:66:42:82:
8d:38:4b:58:d5:49:50:43:a2:1a:f8:ed:a2:70:bf:73:5a:b1:
1a:57:36:b5:3b:74:4c:c3:99:b5:b8:04:f9:56:51:d9:50:d7:
01:da:b0:56:ff:49:b1:30:7c:44:24:3a:25:fa:26:87:5a:3a:
cd:ff:d9:3c:c8:bb:f9:2f:d9:26:36:09:9d:68:10:46:ea:2d:
2e:db:ad:20:5f:53:1e:55:38:ce:4a:17:12:7a:a3:f0:cc:65:
08:9f:fb:b3:33:be:6d:cc:52:ec:d6:da:d5:1b:5a:d0:25:26:
79:52:70:8e:76:e6:c2:19:dc:53:a9:f8:e8:e7:4c:dd:ba:0e:
dd:66:da:6e:50:87:a4:d4:9a:35:30:be:1f:f2:bb:7b:a4:71:
1e:c7:ab:7d:8c:e2:12:b9:6c:5d:21:7f:a6:e6:07:37:f1:2e:
e0:f7:6f:b6:ad:dd:db:ab:51:b5:5a:a7:da:2d:2e:b8:1e:94:
a7:d4:5d:2f:21:0c:c8:0c:96:c2:e1:54:f9:f3:83:99:23:90:
b0:5c:e0:e9:c9:ee:79:c6:36:c0:70:76:33:fe:11:0b:e2:f8:
37:5b:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:43 2025 by rpki-client