Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: 1qiNATAJL7O4SF1WFf+/rxAFBJjeu3x9LslcIYomJGA=
Subject key identifier: 85:4E:CF:B0:D3:17:70:C5:97:7C:A1:E2:F5:ED:D4:C1:6E:70:DC:03
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 019A503DC75BCCEF113EBE3FA3DF6BD1EC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 19:00:17 +0000
Manifest this update: Tue 04 Nov 2025 19:00:17 +0000
Manifest next update: Wed 05 Nov 2025 19:00:17 +0000
Files and hashes: 1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=)
2: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=)
3: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=)
4: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=)
5: kZbYAR7_VQFdZ98vhS7MW7IOa5g.roa (hash: veptVlnHGE2k0mSrEVT7abLTAqTrUJe6t8F1/LuZDvo=)
6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: cN7nSqejoXPmsuNafUKcGwYNx2RujjEG3FqioGr96VI=)
7: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=)
8: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c7:5b:cc:ef:11:3e:be:3f:a3:df:6b:d1:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Nov 4 19:00:17 2025 GMT
Not After : Nov 5 19:00:17 2025 GMT
Subject: CN=854ecfb0d31770c5977ca1e2f5edd4c16e70dc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:90:f1:21:92:65:f4:d9:e4:ed:bb:2a:1e:
14:97:a0:73:10:76:e2:40:db:24:f6:19:63:60:e3:
ed:d4:03:18:cb:38:c1:8b:48:9d:8e:7f:1f:4d:8e:
c3:7b:25:b4:ff:77:b9:ac:4c:79:92:8b:df:f6:58:
93:0c:fe:e7:61:69:66:29:44:8d:46:c8:08:63:32:
81:1d:12:87:03:5b:56:42:42:73:84:2a:73:0a:db:
57:10:ba:04:bc:91:ba:0e:d8:dd:82:fb:67:0e:7d:
cc:4a:d9:3c:a2:34:17:ef:8e:00:1a:5f:fd:21:f3:
24:3b:3f:ed:8c:53:d8:c9:fe:3a:4c:ce:d6:ce:b9:
b5:83:5b:c2:92:68:36:67:b3:e9:de:f7:4a:62:3c:
c8:2f:61:8e:63:d0:e6:7c:fd:84:58:bd:d5:34:88:
54:b6:db:9d:4a:c8:dc:09:24:b7:e2:16:67:6e:3f:
94:d8:65:74:04:9f:c6:68:11:16:c2:2b:ba:8f:cf:
77:7d:9c:f3:4f:ef:1a:96:95:5b:dd:e1:6d:2b:da:
79:61:6b:22:27:94:cf:b7:09:24:99:0f:b8:86:e3:
38:d7:88:be:90:ba:a3:95:b5:44:4e:aa:c7:0e:82:
88:dc:86:c5:6f:34:0b:7b:75:fe:f7:d7:90:2e:19:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:CF:B0:D3:17:70:C5:97:7C:A1:E2:F5:ED:D4:C1:6E:70:DC:03
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:04:97:ff:87:1a:f5:06:d3:69:4b:e2:6d:b5:92:19:8b:78:
c3:f3:54:5b:a8:02:36:66:6c:e1:f4:5b:61:f4:e4:37:86:2a:
f9:67:fa:d3:91:09:8a:2b:4a:07:ca:1a:ee:14:c3:a4:d5:61:
cd:6a:7b:94:52:44:5e:7c:29:9b:f4:11:f1:18:50:5a:8b:69:
43:fb:d7:5d:3c:67:e6:03:b3:01:ab:4e:a6:33:ed:b9:a0:05:
d3:2c:e8:df:bc:6e:b7:26:96:41:6b:e3:cc:59:35:ff:ed:72:
1a:2e:06:cd:c4:e4:4e:69:f5:83:c9:73:01:3a:72:26:4e:f8:
5a:a8:a9:ac:68:7e:71:b9:73:a6:05:78:4a:0f:c1:c4:da:4f:
e7:86:10:11:5e:4f:01:e3:01:4d:86:e6:f9:0c:e0:fb:51:60:
00:d9:b2:20:cf:1d:dc:d9:67:7a:7c:bd:a2:ab:1a:c3:3a:83:
44:c4:36:6b:4b:5f:f0:f9:60:b4:86:31:14:b5:9b:ea:4f:4e:
39:a4:35:76:d8:3e:95:d6:3d:71:bc:c8:0c:7e:98:dc:ca:fd:
15:4f:a7:9b:13:88:d9:ce:99:f2:cf:f4:16:cb:29:77:56:b8:
5e:f1:89:f3:b1:e6:47:33:41:c6:b9:f7:50:dd:4d:17:43:57:
7e:fa:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:36 2025 by rpki-client