Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier: AHb68H4nUfCgJIezPhNyzm7kz9w87zN/7zdJU13gaRQ=
Subject key identifier: A3:EA:96:B5:FE:CD:E3:03:96:AA:05:9F:DD:BC:62:45:89:5F:66:97
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 019A503E0FBF97713052B994C1920D07D2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:35 +0000
Manifest this update: Tue 04 Nov 2025 19:00:35 +0000
Manifest next update: Wed 05 Nov 2025 19:00:35 +0000
Files and hashes: 1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: UAWHP9qy0WqcZnTvLFpERb9ihH7HM5sMNQHwNUrkY+I=)
2: hx1AobN52MdMauAKbwiof1BpngE.roa (hash: 69thDY3N1zb82iIdJWyRKD2mWa/WKlKqpVSoW/+g4+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:0f:bf:97:71:30:52:b9:94:c1:92:0d:07:d2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Nov 4 19:00:35 2025 GMT
Not After : Nov 5 19:00:35 2025 GMT
Subject: CN=a3ea96b5fecde30396aa059fddbc6245895f6697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:dc:3f:bc:8b:1f:16:72:24:35:d1:ec:b7:
e7:f5:ec:b7:75:3b:4f:20:90:ec:a8:5e:ad:3a:33:
36:4e:b5:31:59:9a:02:ed:d1:02:a6:77:ea:db:fa:
e4:65:a4:af:76:5c:bc:80:85:2c:66:22:1f:ba:65:
9f:bd:a2:1f:92:28:65:44:09:a5:79:7d:87:3b:84:
6b:18:2e:48:76:ca:31:ce:50:b9:d7:8c:a3:d4:02:
73:e5:b1:93:8f:fd:47:da:dc:a2:e8:94:1f:50:61:
46:c8:6d:8b:62:40:e6:75:7f:eb:50:2d:ab:b8:c2:
cf:3b:2b:04:a9:37:ca:48:5c:77:0c:dd:f8:e8:b3:
44:63:c0:52:fc:b4:4d:7a:a9:75:6d:ae:9f:a1:75:
2b:b0:74:39:fe:c2:cc:26:35:aa:05:0e:9b:3b:6f:
18:60:84:74:b7:68:6f:d6:61:2f:be:30:65:c9:76:
70:fb:8b:71:7e:1d:e8:a9:ed:a1:97:88:95:5c:b3:
a4:eb:c9:22:fd:60:d6:29:9f:7f:f0:d2:c1:1a:5d:
80:4f:6a:99:53:fb:c8:b7:22:92:a3:dc:7c:f8:27:
c9:6d:91:85:26:6c:17:d5:c6:81:bd:c5:07:0e:a1:
07:c1:b6:d2:18:1e:f7:22:58:72:97:97:b7:12:9c:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:96:B5:FE:CD:E3:03:96:AA:05:9F:DD:BC:62:45:89:5F:66:97
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a2:bb:9e:d5:ab:51:c8:c6:2b:30:00:f4:23:20:f8:22:5f:
78:6a:0c:ad:75:68:a2:39:86:c1:57:be:cf:a4:9a:be:fe:ad:
3c:0e:62:b0:ea:b2:42:06:d6:a7:28:ea:c8:16:c9:31:8a:34:
5e:df:84:88:04:0e:57:57:34:cf:26:81:93:0d:98:7d:75:25:
a9:b2:eb:bc:d0:57:ca:88:5d:54:be:e5:5a:70:3a:ce:14:fd:
01:5a:b9:2f:94:97:e6:0c:47:d1:8b:42:d3:2b:b0:a0:37:9b:
84:ad:46:dc:62:03:e3:eb:fa:fc:32:f3:d0:28:2d:fa:38:77:
b6:c3:ce:ba:60:78:c9:b5:ac:f4:b9:fc:e3:8f:2c:68:33:c7:
97:ee:e9:97:f2:9a:51:7c:57:7f:52:c3:63:94:9d:c5:20:0b:
f3:c6:f3:eb:45:2f:56:fc:80:fb:5e:ea:9b:83:72:c4:91:7f:
d7:e8:d9:3f:81:0e:d0:9d:ee:91:65:45:fc:dc:c9:e0:5d:c1:
d5:e6:f6:18:e2:be:2e:10:10:22:85:08:e3:23:54:98:fd:36:
a9:be:1b:64:df:f2:98:58:89:98:5f:2b:71:71:3c:68:c1:56:
c9:a9:51:60:17:c1:ea:d1:0f:ea:12:3f:3b:95:9a:95:5e:c4:
62:50:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:05:12 2025 by rpki-client