Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: HjVHsRe3FDdO0klg/jP5Me/m8DVIIZuHx6Fva02vZH8=
Subject key identifier: 1A:92:35:F5:E0:E4:45:94:84:9D:92:D9:76:20:A7:9B:1F:23:49:D9
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 019A4F62A95364E648F08A2D5BE901BA28E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: IHYlUHhav66bmEf1nt47r+HuAATHg8ozVYfPZbZcvYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a9:53:64:e6:48:f0:8a:2d:5b:e9:01:ba:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=1a9235f5e0e44594849d92d97620a79b1f2349d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:34:b9:70:bc:1d:16:ab:b4:c1:c3:8b:0b:
31:ac:01:eb:27:de:20:46:ab:3b:1f:70:9d:ba:03:
ae:93:5a:08:be:f7:05:47:01:b8:83:52:16:99:8e:
eb:24:18:ba:02:56:05:7c:e0:85:63:08:ec:de:e2:
6c:25:40:ef:79:f8:12:76:a1:e8:13:bf:c0:ff:a0:
de:2a:97:f3:9d:b5:07:6a:cb:1b:07:ea:b5:ac:62:
40:46:41:62:63:f6:15:3d:b1:34:80:1b:f9:a5:8f:
37:91:60:7b:1d:9a:18:06:7d:92:f1:95:b3:86:e7:
1f:be:ea:0f:35:75:c7:58:55:36:e1:ec:2c:a8:e9:
10:09:ff:a0:5b:ab:82:09:f5:65:49:00:1d:6b:7b:
a1:4b:d3:f3:94:2b:d9:1f:45:26:c2:03:23:67:11:
89:3f:b5:22:b3:12:d3:f0:c3:96:27:34:b7:b3:20:
83:76:9c:95:1b:b2:6a:f7:8f:14:22:b6:db:5e:35:
4a:22:12:27:5c:05:97:79:de:81:20:cc:50:92:1f:
26:30:74:a8:cf:fc:b4:21:93:e9:32:a1:e8:0f:15:
08:37:39:08:4e:13:e8:56:d8:c9:0e:29:2f:31:04:
a6:7a:0a:64:e3:33:46:87:40:27:2d:1d:e0:54:1c:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:35:F5:E0:E4:45:94:84:9D:92:D9:76:20:A7:9B:1F:23:49:D9
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:03:b2:67:20:47:b9:17:aa:9c:92:b5:00:74:3e:b1:e6:
62:4b:03:bd:1b:e6:32:b0:45:d3:28:cf:7e:43:b1:66:2d:3c:
66:8c:ee:09:74:dd:cc:33:c4:da:24:6a:15:c3:e2:46:90:0d:
8f:04:93:37:b3:0b:cb:b9:03:3f:40:94:62:5c:c8:0a:91:17:
95:15:ab:54:40:df:2c:74:18:67:91:de:1c:a4:b8:7d:8a:43:
74:c1:f0:50:d9:14:6d:4b:85:38:c1:c2:c6:65:67:48:8b:a1:
d5:51:4e:f1:99:72:2d:6f:2c:32:3d:92:99:b6:9c:15:d6:2b:
a5:44:bc:dd:7e:61:46:82:e6:03:86:50:98:11:52:ff:1e:42:
17:54:c4:02:2b:41:dd:79:cd:2a:b0:06:08:44:3b:cb:59:2b:
e3:f1:46:9d:11:b1:93:01:4b:1d:b6:c0:84:5b:61:bd:91:af:
ff:60:bb:eb:15:30:97:4d:7b:90:ad:b2:0b:ff:b6:11:04:38:
50:85:05:75:c0:2b:20:6b:84:81:1e:fe:e8:2d:bc:e1:f6:fb:
88:27:53:f6:81:dd:a9:de:52:33:3c:d5:bf:36:cb:d5:e2:80:
04:69:ec:e8:d3:6b:95:72:01:5a:61:73:62:ea:64:4e:ee:58:
6e:c2:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:04 2025 by rpki-client