Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: izdGuW/forSduofD3hQXMJjfZ+ReVlNialKFGZy5K4o=
Subject key identifier: DB:9D:F9:7D:BF:93:40:41:6A:63:26:79:C4:FD:78:4E:8B:E5:42:85
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019A50E2849833D683E96B611D0300A36BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 1384
Signing time: Tue 04 Nov 2025 22:00:13 +0000
Manifest this update: Tue 04 Nov 2025 22:00:13 +0000
Manifest next update: Wed 05 Nov 2025 22:00:13 +0000
Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: UWYYlJH7+5Fba/1EzMGMl2BHJ9/+gzb4vr5L36Bam8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:84:98:33:d6:83:e9:6b:61:1d:03:00:a3:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Nov 4 22:00:13 2025 GMT
Not After : Nov 5 22:00:13 2025 GMT
Subject: CN=db9df97dbf9340416a632679c4fd784e8be54285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:35:7d:f6:d2:d6:4c:37:3e:73:57:22:cb:
47:36:e2:e6:29:34:64:1f:09:f4:e1:74:96:b6:b7:
d4:98:b3:09:df:84:e6:e7:c3:3c:37:96:ef:f5:30:
a1:b8:13:68:e9:81:0e:ed:78:8d:9b:a9:73:29:5c:
00:bb:6e:70:18:fc:e8:97:ce:83:a3:4c:93:df:53:
4b:9c:0e:da:70:a8:8d:50:34:fb:eb:96:6d:ec:8c:
e7:78:e1:92:4c:c6:0c:e4:5d:23:4b:18:07:53:c0:
05:8a:82:06:e2:a2:15:d1:0b:6a:4d:d8:4f:16:2c:
09:a1:f0:ac:16:19:f0:8d:4b:0e:f0:5d:62:03:55:
98:ea:40:e6:a0:13:c5:21:45:d1:04:8a:c2:4b:ca:
7c:b4:0a:e8:66:ff:58:89:a5:a0:11:50:54:16:64:
bb:14:a7:41:c0:e2:29:d1:8b:f1:12:f9:e8:3f:26:
1f:b5:02:fe:8f:28:2a:b0:f1:52:09:ee:2d:36:80:
80:d6:26:fd:6f:b4:1a:c0:b3:80:7a:d6:ee:3f:10:
ae:16:03:35:09:0e:66:69:5b:f8:ef:7f:d4:d1:14:
a4:73:0b:2c:97:cf:c8:d8:05:c8:9e:8c:19:14:9d:
64:2e:44:76:ad:27:64:1d:69:69:12:fb:ae:0a:22:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:F9:7D:BF:93:40:41:6A:63:26:79:C4:FD:78:4E:8B:E5:42:85
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:44:06:09:fe:51:e2:a1:dd:7e:3d:33:0f:f6:ba:b4:bf:05:
57:ce:5e:df:9a:e8:94:e1:af:43:b9:90:11:09:f4:69:18:b3:
d7:f8:e6:06:69:95:50:24:76:62:09:f5:d9:7a:f9:7f:45:d2:
03:04:de:41:74:e5:81:8e:c4:8d:e9:fb:ae:94:b0:74:a0:da:
47:d2:45:38:0e:00:60:52:12:72:4a:e7:02:2d:4b:6d:7b:5d:
bd:50:37:90:39:ac:e1:34:ee:a7:45:61:c1:b0:62:49:78:59:
1d:79:de:2c:d7:bc:ee:df:c6:00:3b:85:7f:9e:bd:44:19:ed:
da:b9:74:1b:7e:91:c9:e8:81:dc:35:a9:b4:92:82:27:e9:50:
1f:95:7a:4f:e2:23:85:b4:bf:1c:bc:21:fe:67:24:12:96:ad:
d2:18:be:de:ea:05:31:99:79:29:44:19:c9:37:ea:55:87:6d:
2a:30:46:e7:58:46:ae:7c:3a:7f:af:77:a9:90:ed:4f:2c:cf:
a1:d6:b8:80:b9:0f:32:7c:9c:0b:97:c6:7d:0c:e6:97:0e:5a:
b6:a9:cd:63:a5:14:4f:3d:07:f0:4f:16:71:f8:d6:3c:c9:18:
15:6f:7d:50:3d:8b:cb:56:fc:c2:91:3a:76:a6:36:de:8a:35:
27:d9:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:06 2025 by rpki-client