Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier: 2owKqgPM8od+wy6OUxzeaV9WXemd4PH9q5C2WVf5ZlA=
Subject key identifier: 69:03:47:23:32:DE:C1:D1:B7:7B:E4:BE:BE:41:DC:A5:2E:75:7C:EB
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 019A4E4F32923345874F3075817DF0834663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number: 0C3D
Signing time: Tue 04 Nov 2025 10:00:04 +0000
Manifest this update: Tue 04 Nov 2025 10:00:04 +0000
Manifest next update: Wed 05 Nov 2025 10:00:04 +0000
Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: er7cEcw1WPx0s3KK4B6CvuVhLf4a/dbYkbtM3TgfxB8=)
2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:32:92:33:45:87:4f:30:75:81:7d:f0:83:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Nov 4 10:00:04 2025 GMT
Not After : Nov 5 10:00:04 2025 GMT
Subject: CN=6903472332dec1d1b77be4bebe41dca52e757ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:98:09:46:47:a9:a9:9c:18:1c:07:1a:f1:
2a:78:b6:c9:53:fd:fb:b1:9b:89:8f:cd:df:b9:fe:
8a:9e:42:49:1f:93:08:68:22:07:ec:2e:fb:a9:8a:
6f:61:d6:55:36:f4:3b:b0:46:79:0c:0b:d7:66:b1:
75:27:19:01:6e:c0:ac:89:c2:ef:12:80:c2:5c:e1:
ef:48:ad:f5:9c:ef:0d:67:c0:95:bb:7c:20:d4:ca:
a5:2e:cc:5c:50:1f:b3:a6:9f:d7:6c:c5:a9:06:ea:
88:26:12:f5:66:13:17:9c:7a:13:48:db:14:f5:ca:
05:ac:37:34:6d:26:c0:07:5a:d9:e1:12:37:31:02:
62:c3:3f:c9:7a:07:35:7c:58:68:68:ef:15:34:09:
e4:fc:1b:9f:f3:ef:de:df:4d:71:0d:a2:09:1f:c1:
19:2e:41:01:36:54:3a:ff:c6:89:b9:95:f2:37:3f:
e3:47:b7:5d:8d:29:90:45:98:18:50:7a:b8:5d:11:
71:1e:16:d3:98:4b:27:b0:1a:0f:2e:d0:c0:fa:ca:
33:ed:e3:39:81:2a:ff:1c:25:3e:d4:2f:23:e4:69:
6f:e3:ac:fd:83:15:54:fe:69:e9:9c:a5:41:b6:bb:
f0:44:6a:3b:65:31:92:13:f3:10:84:e2:0c:90:5c:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:47:23:32:DE:C1:D1:B7:7B:E4:BE:BE:41:DC:A5:2E:75:7C:EB
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:7f:b0:69:7d:ab:79:d8:36:e1:57:ee:6c:dd:4c:1d:90:
b8:09:85:bc:05:fe:28:46:29:bb:eb:18:df:5b:3f:54:e3:90:
73:6e:ba:89:51:2b:7d:de:f6:d7:76:2b:05:72:23:60:d8:a4:
79:3e:01:7d:9b:a8:a6:dc:85:e8:c3:82:0f:1e:62:3e:7c:c2:
b3:d2:d8:dd:e8:01:43:bc:7d:bd:65:23:1a:dd:aa:4b:4d:19:
fd:1d:8d:43:58:b5:6f:58:5a:9b:52:70:7a:bc:06:27:55:9d:
57:7d:2e:f9:d5:ff:88:57:fe:75:90:ad:5a:6f:e5:5f:f5:24:
2b:62:15:d2:f8:63:e8:7e:cb:b3:05:8a:3a:ea:cb:7b:f3:1a:
a5:1e:79:0a:e5:7c:4a:21:dc:29:fe:af:51:d3:5f:30:17:ef:
f9:6a:1e:32:d7:32:cd:95:47:7f:8c:84:7f:43:ee:4a:df:9d:
e4:a8:ce:0d:0b:22:a9:bc:1d:a8:a6:78:18:b4:8a:04:23:a1:
f2:64:c8:e8:0a:13:8e:9d:02:70:76:8b:83:5b:f6:91:ad:6d:
61:6e:76:37:76:ec:9d:b6:72:d5:36:4a:df:de:07:62:a9:84:
4b:9f:3b:f5:0e:42:6e:98:88:d5:c1:b9:06:23:1b:ed:f6:58:
aa:bf:b7:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzKSM0WHTzB1gX3wg0ZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw
ZTNiZjEwHhcNMjUxMTA0MTAwMDA0WhcNMjUxMTA1MTAwMDA0WjAzMTEwLwYDVQQD
Eyg2OTAzNDcyMzMyZGVjMWQxYjc3YmU0YmViZTQxZGNhNTJlNzU3Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/aYCUZHqamcGBwHGvEqeLbJU/37
sZuJj83fuf6KnkJJH5MIaCIH7C77qYpvYdZVNvQ7sEZ5DAvXZrF1JxkBbsCsicLv
EoDCXOHvSK31nO8NZ8CVu3wg1MqlLsxcUB+zpp/XbMWpBuqIJhL1ZhMXnHoTSNsU
9coFrDc0bSbAB1rZ4RI3MQJiwz/Jegc1fFhoaO8VNAnk/Buf8+/e301xDaIJH8EZ
LkEBNlQ6/8aJuZXyNz/jR7ddjSmQRZgYUHq4XRFxHhbTmEsnsBoPLtDA+soz7eM5
gSr/HCU+1C8j5Glv46z9gxVU/mnpnKVBtrvwRGo7ZTGSE/MQhOIMkFx9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkDRyMy3sHRt3vkvr5B3KUudXzrMB8GA1UdIwQY
MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt
M2IxZTcyMmE5ZGM4LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4
LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0l/sGl9
q3nYNuFX7mzdTB2QuAmFvAX+KEYpu+sY31s/VOOQc266iVErfd7213YrBXIjYNik
eT4BfZuoptyF6MOCDx5iPnzCs9LY3egBQ7x9vWUjGt2qS00Z/R2NQ1i1b1ham1Jw
erwGJ1WdV30u+dX/iFf+dZCtWm/lX/UkK2IV0vhj6H7LswWKOurLe/MapR55CuV8
SiHcKf6vUdNfMBfv+WoeMtcyzZVHf4yEf0PuSt+d5KjODQsiqbwdqKZ4GLSKBCOh
8mTI6AoTjp0CcHaLg1v2ka1tYW52N3bsnbZy1TZK394HYqmES5879Q5CbpiI1cG5
BiMb7fZYqr+3/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:50 2025 by rpki-client