Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: RUDZPfkBGmTcQ4LFq3tmtNvc9eDc2wsamTmhWVCOHZ0=
Subject key identifier: E9:1C:BA:FB:EB:0E:C0:62:56:C9:82:7F:1E:00:24:30:B7:3E:1C:89
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019A4F2B57BB9748F4EE6A569FA543C72C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: gbKVayyCETL+Qgh8T/f0gXqkYYMpmj+bLZ5ESxR4cb8=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:57:bb:97:48:f4:ee:6a:56:9f:a5:43:c7:2c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=e91cbafbeb0ec06256c9827f1e002430b73e1c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:2c:73:8d:02:56:8a:dd:ee:0a:1c:18:b1:
25:01:76:18:c6:41:cc:31:09:5d:77:1a:14:a3:0e:
92:24:35:b1:6d:ef:ec:83:4a:10:87:07:1e:95:8e:
93:73:98:45:43:4f:1c:74:7d:5a:dd:97:93:44:99:
63:68:df:5c:17:53:22:b3:fd:5d:b8:62:bf:e9:aa:
8d:ba:a2:b1:10:fd:ae:03:65:6b:c9:45:be:0a:f4:
8a:7d:56:af:5b:b5:49:2b:03:1f:7b:be:9d:b7:f2:
3c:6d:c3:88:a5:d3:53:2b:1e:1d:42:ee:3a:32:4c:
41:a7:23:f0:64:a4:09:67:69:63:8b:19:38:04:f9:
c3:58:61:06:31:f4:bc:87:c6:d0:5d:80:70:7f:c1:
58:d5:b4:cb:cb:73:7c:6e:87:2e:0e:fe:27:a1:72:
c7:e3:95:4c:24:61:1b:71:c2:71:47:d8:b3:d8:62:
4b:ed:f7:0d:b6:5a:0d:65:46:05:3c:c0:90:bb:55:
7c:d4:45:f4:b7:e0:a9:4b:da:b1:84:6c:9b:28:d8:
8b:3a:ca:08:c2:33:12:d1:05:be:51:87:94:2c:ea:
df:51:7f:f5:e3:2d:f8:8e:da:68:21:0e:af:13:a6:
d8:04:0f:23:47:b9:47:d8:38:e3:2d:0b:eb:b4:f6:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1C:BA:FB:EB:0E:C0:62:56:C9:82:7F:1E:00:24:30:B7:3E:1C:89
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c1:27:c5:57:72:ef:83:2e:6d:e8:5c:b4:00:94:f6:32:32:
ac:57:d0:a5:85:b8:61:65:1d:64:09:68:6e:c1:75:9c:77:96:
93:a0:99:2e:e8:5b:1c:ae:a0:f4:a5:12:06:91:cd:46:a8:00:
77:0f:6b:3c:ca:0f:1d:09:ba:e0:fb:8a:64:c8:40:a5:86:51:
6e:90:3e:c4:95:1b:e4:d3:a5:df:65:9c:86:14:9c:f5:fb:ce:
9a:c7:b4:53:56:0e:40:cd:af:f7:25:00:c7:73:e6:97:5e:1d:
01:85:d4:25:30:ba:e6:1b:77:1a:d5:ed:08:ba:60:8b:c8:4a:
90:a8:ce:ac:26:2c:c1:ce:01:bf:26:ab:50:aa:dc:17:f6:82:
a4:00:7b:7b:e5:76:90:83:a6:30:15:0a:cc:d6:c9:79:bf:b8:
70:cf:db:39:e1:9c:ca:66:e1:48:72:69:ce:12:55:68:7b:d5:
d9:ab:6d:81:bc:3d:f5:ff:f4:58:6a:ae:f7:85:2d:06:56:0e:
b2:99:2c:fe:dc:df:4f:a5:48:53:57:1f:73:3f:f1:36:07:65:
59:ba:ec:18:3d:7d:c3:56:c6:7f:bc:9f:b9:20:67:3c:fc:a5:
ef:ce:e2:1b:c2:ff:8c:4f:db:fd:5f:ff:01:0a:41:51:de:e1:
50:3b:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:41 2025 by rpki-client