Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: z8SKRr8OHYksbdU+mkOqXX0NU7TzCA7dSQa4X4bBeGc=
Subject key identifier: E4:1B:06:11:AC:C0:32:D0:C1:FF:CF:94:01:C2:A0:C0:65:50:94:B7
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019A4D746157EE6B05EC2EC38314B8842201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 168D
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: RtIGKXoQrR/VEsGQn/qZNiBCR4IdeFDKBbDTiv8Uza4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:61:57:ee:6b:05:ec:2e:c3:83:14:b8:84:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=e41b0611acc032d0c1ffcf9401c2a0c0655094b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:f7:be:e9:48:71:51:99:a5:62:7d:89:78:
72:74:ea:9d:f1:2c:fe:e7:34:2e:a1:69:a2:29:ce:
27:b2:73:6d:0d:c3:66:71:df:33:be:d1:73:3c:fb:
0d:27:cb:b1:57:35:5e:c8:9f:32:49:a6:7d:7e:fb:
3e:d2:db:58:54:7c:0c:75:a5:60:ec:c3:34:f8:0d:
be:a8:34:a8:3d:cd:12:b3:6b:f8:9b:56:d6:4e:f0:
70:89:7d:5c:98:ad:7c:79:be:45:4d:bb:f4:07:7c:
fa:e8:84:4d:52:8f:6a:30:2c:3f:c2:fe:b6:c8:6e:
62:68:95:0f:db:42:0f:85:81:18:1b:db:74:6d:9c:
3c:a7:23:3a:cc:78:1c:39:43:c3:ce:02:1a:bc:9e:
b3:8d:b9:25:23:bb:59:3f:53:51:83:78:a7:06:cd:
4c:52:0d:d9:98:a0:16:05:4b:7a:a2:13:5d:65:3c:
4c:15:82:45:d4:09:a5:e0:d9:25:73:d0:ba:25:56:
0d:e8:8d:3e:06:7a:91:96:14:c1:66:15:5e:02:2c:
71:95:dc:84:25:42:7d:4e:72:2f:9e:6a:36:5f:98:
ba:5e:09:e9:6a:53:6c:0d:40:08:b0:6b:6d:8f:b3:
5a:b0:f7:c8:e6:5b:5f:cb:a4:82:a7:59:d9:de:38:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:06:11:AC:C0:32:D0:C1:FF:CF:94:01:C2:A0:C0:65:50:94:B7
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c1:6e:32:fe:2f:96:65:4b:d7:3b:56:2e:42:36:1b:1e:c2:
43:8b:e4:bb:c7:33:c0:78:98:d7:d8:ec:9f:d7:b1:a9:c3:69:
19:f2:f7:fc:f9:0b:e6:61:e5:7c:62:24:ca:5b:4a:79:73:73:
66:34:c9:0f:a4:75:c1:85:a0:65:28:d9:21:14:3b:37:c7:f7:
5d:9e:5e:f3:ae:b7:ae:9e:bb:64:92:ae:ec:50:eb:d7:16:d6:
56:a0:24:fa:1d:9f:98:cb:84:5f:36:3e:4f:03:ab:37:1e:9d:
e6:21:fb:42:81:e4:30:9e:81:4d:36:cd:28:db:d2:37:8c:e6:
86:6d:31:ff:68:a0:61:6d:ad:ad:86:4e:f4:61:a4:b5:7a:20:
8c:91:e8:c8:74:5f:83:52:3e:c7:aa:38:1a:04:44:1c:40:44:
4d:ef:49:6e:a1:06:c3:83:3b:a4:89:0d:0e:f5:75:99:16:a5:
db:6f:00:49:f2:19:18:41:11:d1:21:68:51:4f:0a:81:ed:32:
e2:e8:5c:5d:e5:27:8f:f7:a6:30:d4:4f:64:b1:17:c6:b2:38:
0d:f7:ac:98:59:9c:fb:55:7f:58:aa:18:66:f9:00:ef:d8:b3:
af:13:e2:73:ca:ff:74:ff:52:dc:c9:d2:21:a8:20:b5:63:c4:
20:22:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:16 2025 by rpki-client