Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: rBWOdydV1OmJ/zCkKOau7hJ1yDGpILB40bja54fVynU=
Subject key identifier: BB:6F:9F:46:B2:26:05:B5:D8:31:C8:31:A8:7C:0F:52:6B:B1:50:3D
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019A4DE1CB332C403514FD7142BB743AD41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 14B1
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: 1Q5iHdzKxf8MNemcT1RBOOzIIJ0.roa (hash: dhLNFKd+PfuuwcD6QJZQdI1MnPf4yhnne4cWUKHT2mc=)
2: BI16eSxubERsxjczNTuD1FKYiqI.roa (hash: 5RSrabZNzAP6tOwmOjiW5WIGJ28xp22z5+HfxDxqq2o=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: RXPkPcpfezQ/0Iv9USD5J+8OKQdI8WIIoKLKPRt7ZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cb:33:2c:40:35:14:fd:71:42:bb:74:3a:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=bb6f9f46b22605b5d831c831a87c0f526bb1503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:a4:2a:c9:2e:70:5b:52:47:07:40:61:86:
c1:4a:f2:bf:61:49:83:a4:b6:33:c7:f9:74:64:fc:
07:64:1c:d6:a1:5c:3d:73:e1:12:27:84:32:fe:78:
57:f0:32:27:ac:d6:20:d8:47:29:c3:42:ab:62:53:
d6:10:b5:50:df:11:e9:5e:46:8e:12:88:97:0f:c1:
28:71:7f:d5:b8:1f:4e:1b:e3:1c:36:8c:c7:8d:ff:
dd:0f:2f:64:0d:6c:13:c6:43:51:5d:8d:da:4d:ed:
1b:9d:ec:93:83:94:cd:9a:7a:96:b2:cb:bc:42:40:
ef:4a:ce:46:9c:76:89:00:0f:6e:cc:50:bf:c3:e4:
0c:64:af:68:ae:ba:e2:7d:bd:17:7d:b8:33:75:e7:
b4:7a:fa:d6:58:f5:28:66:b0:e7:54:55:ac:5f:26:
cb:65:db:e5:07:8f:d9:98:01:f1:da:bc:7a:72:31:
5a:c6:df:92:74:08:e8:f8:7c:1c:1f:f0:74:05:c7:
19:7e:03:75:7d:07:2f:d5:f1:26:f0:30:fd:40:c9:
bc:47:a2:c7:af:90:02:3b:ac:73:6e:ad:31:ea:ea:
e2:57:d8:e8:27:cf:24:46:98:66:71:42:cf:41:45:
e3:e6:96:c3:82:bc:77:51:ff:3e:76:48:47:b3:27:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:9F:46:B2:26:05:B5:D8:31:C8:31:A8:7C:0F:52:6B:B1:50:3D
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:33:e3:fc:d1:27:dd:d6:be:3e:15:fb:f0:01:bc:66:28:
7b:fb:43:81:aa:ff:44:98:b4:49:d6:2e:f3:12:93:01:d2:9a:
38:89:d3:d4:2d:74:b4:26:00:d6:ff:7c:11:af:f9:ee:f4:cf:
1c:42:e8:4e:7d:ed:9d:5d:fe:71:5e:1c:95:0e:3d:85:03:c0:
74:f2:b6:4e:46:74:af:6c:54:1d:4b:07:72:0c:bd:c4:43:b4:
7f:c6:96:10:b7:f1:b7:77:f7:e6:f8:7d:bf:77:10:15:aa:40:
63:16:ef:2f:3e:4f:1f:c9:83:81:ad:fe:34:8f:3b:9c:8b:83:
39:e1:60:ad:22:aa:c8:c7:41:12:2c:34:9b:17:0c:6f:7d:e4:
d7:6a:63:49:10:4a:91:38:31:e4:83:1f:06:8e:96:4b:1c:0f:
8a:fd:06:7e:ad:5f:ff:dc:94:08:dc:f3:e8:9a:5e:f7:21:6e:
80:fd:88:a5:20:58:c3:32:c8:fb:6a:8d:e8:ea:db:2d:40:c8:
ee:23:43:96:90:52:6f:35:1b:53:11:94:fe:ca:72:86:f0:68:
dc:42:e6:a6:ef:33:f6:28:1c:28:1c:8b:1c:5a:cb:ab:47:5c:
63:88:51:73:c5:88:76:4d:2a:52:51:f5:05:d4:8f:65:44:10:
1a:14:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:48 2025 by rpki-client