Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: JxrQUI0LRHmbBxBHd8gML0WsiunNe3VtCR2+gBUJW20=
Subject key identifier: 6E:48:B4:33:FA:78:63:72:B2:D6:B8:6E:05:78:96:E7:4A:A5:5B:BA
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 019A5187CD4EDB4D81198B2FCAB3E38E0570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 06B9
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: Ohp88MoK3ik+emeAmye7196TNoV6od9VpC3zaCnA+PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:cd:4e:db:4d:81:19:8b:2f:ca:b3:e3:8e:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=6e48b433fa786372b2d6b86e057896e74aa55bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:71:08:70:fe:51:5b:37:c6:34:73:ae:67:
7b:50:7b:bc:30:77:04:69:9a:2a:66:4c:b1:b9:70:
0e:3d:24:0f:bc:6b:0f:92:27:8a:6b:81:a8:f3:8b:
96:bc:03:68:b9:a7:a2:4e:d4:e4:3e:80:9c:7b:16:
95:b7:bd:9a:67:bb:ba:ac:0b:07:bd:e6:05:6e:e7:
d3:75:cf:db:fc:91:d8:2b:15:08:37:3a:37:3f:ca:
e0:6e:b4:92:a9:d4:06:0c:97:79:cf:fc:bd:70:60:
af:dd:ce:03:e7:c5:18:b3:58:41:f0:e8:9b:c6:d3:
3e:5a:64:67:94:40:cf:50:dd:67:a6:cd:75:34:09:
d7:5e:09:4e:31:e7:b7:e2:67:09:26:35:48:04:df:
7c:89:c6:07:ae:ed:42:0c:f0:08:a0:62:44:4e:44:
e4:4d:86:72:6e:3d:f8:26:4b:c6:5d:bf:a3:61:14:
8d:d6:fe:3c:5a:f8:e9:7f:4b:c8:25:e2:e1:3f:6f:
9b:f0:3c:ad:55:4e:28:23:ce:58:55:65:db:b9:51:
c5:5d:a7:c2:44:22:ab:31:ae:b7:25:f9:44:64:f4:
cd:a4:20:bb:f3:03:ad:f4:b2:52:d9:a8:5a:c6:c1:
e5:2d:39:95:ba:ab:f3:a9:3f:72:97:a4:47:a2:3c:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:B4:33:FA:78:63:72:B2:D6:B8:6E:05:78:96:E7:4A:A5:5B:BA
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:c6:24:43:e5:2a:d5:35:0c:0c:15:09:b3:1a:4b:a9:8e:
e9:83:67:26:bb:b4:7e:db:86:30:70:b7:58:b6:30:77:6a:9d:
29:fe:66:ef:e0:ad:c8:62:21:75:17:1b:98:b0:8a:e6:fc:bd:
94:a4:ed:3b:bb:11:51:5f:76:e9:d8:48:fc:b3:b0:cc:f2:e1:
2c:26:9c:c8:d3:9f:ae:35:01:1e:5d:5e:3f:fb:b7:71:6a:4c:
10:45:be:f9:49:c3:3c:12:8c:68:09:9c:8b:fc:6f:c1:1f:29:
7e:58:ac:1f:12:9d:73:df:53:fb:bf:a5:c7:16:94:a0:a1:25:
b6:cf:93:19:c9:2d:fc:e4:94:26:9b:a8:99:4a:12:20:b1:e7:
17:df:50:58:fc:19:ff:ad:4b:a8:25:a4:29:06:a3:ef:79:92:
4d:be:ed:53:d1:a8:d1:9e:7b:20:87:dc:9d:e2:4c:cd:e5:0f:
5b:78:50:6b:8d:e2:20:90:f4:1d:80:3a:0b:3b:46:e5:80:22:
89:2b:16:4d:c7:d9:17:29:b9:c2:88:64:f3:11:ef:0c:01:d4:
be:c9:0d:e7:8f:82:44:ec:18:02:b5:07:77:51:dd:65:b9:a8:
86:9d:fa:b7:e7:a6:15:cf:c4:39:70:38:30:79:e2:a5:d0:27:
3b:bc:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:15:23 2025 by rpki-client