Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: P7/11MBT9B7UCmUrqPXwF7+UUcZWqNYdV/Tu4pPMMQM=
Subject key identifier: 9B:97:EE:F2:7F:C3:67:DD:31:0F:73:80:B0:08:2C:74:C4:BC:E4:C7
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 019A4E19071028605F4F3559B624884A67A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: i5kty72vLgSK/eArRSi3S7uDnQfkpk5LtsuMqsj9OYQ=)
2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:07:10:28:60:5f:4f:35:59:b6:24:88:4a:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=9b97eef27fc367dd310f7380b0082c74c4bce4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:9f:c3:4c:27:48:90:05:b9:75:2b:e5:78:
08:b5:9d:a2:b0:55:fd:b5:e9:b5:95:86:de:b0:22:
23:3d:37:34:8c:ce:f2:cd:53:53:ed:d9:f2:a3:18:
63:b5:22:35:87:9a:45:0e:2b:e0:57:30:4b:e4:16:
df:db:e3:25:8c:c7:f3:e3:16:c8:78:71:f5:8e:12:
1e:aa:30:54:02:f6:21:ff:84:a9:45:ee:0a:30:76:
15:c0:5f:03:f0:25:0b:ee:55:52:23:ec:62:a9:a3:
34:c2:9e:aa:c1:f6:6e:d1:42:88:68:a4:50:dd:8e:
8b:a1:a6:5d:d7:94:0a:e4:ca:65:a7:c1:1f:09:f4:
e4:03:b3:71:42:d4:84:99:f4:a1:83:ce:ec:80:0c:
db:54:0e:28:6e:ee:22:30:4c:2a:f6:3a:14:9d:40:
cd:c9:96:bd:6d:cb:7b:09:34:41:3e:94:ef:e4:75:
b1:a3:1d:1e:b3:78:ee:40:67:44:84:3a:bc:7c:b4:
c7:4e:61:4d:e8:12:a9:e8:69:e1:df:7c:24:ec:e0:
fe:c3:82:65:b3:7b:b1:5e:d7:18:fe:f0:fe:da:2a:
d3:ae:5f:50:0b:1b:63:5c:4f:44:c5:ca:96:12:0b:
e9:a9:40:62:40:8d:35:cf:ad:39:8f:36:c9:11:57:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:EE:F2:7F:C3:67:DD:31:0F:73:80:B0:08:2C:74:C4:BC:E4:C7
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:21:e2:74:05:05:e6:d8:47:e4:50:27:a2:67:89:27:b8:
ca:14:3c:57:09:88:63:e0:61:3c:30:3a:ed:43:74:bf:66:7e:
ee:d3:b6:1a:81:ee:48:d4:8d:84:b6:55:00:52:b3:09:bc:ea:
28:fc:67:1a:cf:05:08:5d:6c:48:8b:ed:28:72:69:20:4a:8e:
50:b1:86:bd:e8:c8:9a:2d:f1:5f:b3:dc:90:10:02:aa:09:d2:
0b:87:30:a3:64:be:ba:fd:50:fa:68:1c:0a:60:23:cb:3f:f4:
f2:0b:9b:12:3f:58:b5:d2:e6:d5:5e:f8:8e:05:45:0c:25:96:
78:66:bb:aa:20:a8:60:55:bc:08:01:82:37:29:12:10:36:44:
9e:81:65:bb:74:0c:2d:e9:cc:9d:56:95:60:09:80:6c:e4:a7:
5f:97:2d:97:8c:5f:53:30:96:78:88:cd:de:76:11:76:d8:d3:
6c:41:b1:18:43:67:b9:e0:e9:5a:18:7e:d2:47:fc:af:23:e1:
67:2c:2d:cc:95:36:ec:fe:f8:17:53:3e:b0:60:2e:61:de:9f:
36:5d:62:41:2b:37:db:e1:ea:82:86:87:b7:35:3d:1c:43:48:
f3:ea:ed:c4:06:61:12:e8:69:ec:8b:a0:41:a2:86:d7:48:2f:
a8:81:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:18 2025 by rpki-client