Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier: vWmlvc/QfMRDzzZBEbGb0QeWyeyznF6QSUjXf2frxd4=
Subject key identifier: 2C:7C:63:D6:F6:3B:33:23:51:70:83:7A:6D:40:75:C7:27:B0:4C:49
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 019A4D7458041F118734CA51A0F28352ED26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:01 +0000
Manifest this update: Tue 04 Nov 2025 06:01:01 +0000
Manifest next update: Wed 05 Nov 2025 06:01:01 +0000
Files and hashes: 1: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: oVo0KZbKYQpUe0E260co/QSohQjddPX1GgWVCf21yXw=)
2: _eRNvbcACjLb9zEN3lnrbv0mjjE.roa (hash: Ry+XCwkTsLP6ueqUWQ1SIxu219L75tL3GOyhLkzc9RI=)
3: ufpRI9yuEp7tjzAxssHQURYt3B4.roa (hash: 7g6vsYsyIBAU9MzilTSjquNoGwZYrdhjnklJiiSJri8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:58:04:1f:11:87:34:ca:51:a0:f2:83:52:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: Nov 4 06:01:01 2025 GMT
Not After : Nov 5 06:01:01 2025 GMT
Subject: CN=2c7c63d6f63b33235170837a6d4075c727b04c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:a2:d4:42:e5:cf:42:6c:fa:54:fc:95:c7:
75:bd:3a:8f:71:2d:3e:ad:a2:74:cf:5c:f1:71:1e:
54:9b:87:19:45:96:e7:bc:5f:6f:8b:6d:fa:9b:48:
9f:8c:45:fc:83:55:c6:df:59:9b:48:69:5b:af:e1:
5e:8c:31:7b:67:df:11:0e:ef:c4:28:84:f8:22:1b:
b2:a8:04:bb:c3:3d:11:68:03:25:ad:b0:47:98:d9:
f7:d3:d0:8f:b6:b0:ec:1e:78:f9:82:12:3d:68:96:
19:fb:ea:e2:6e:4a:8e:59:30:c0:88:a1:19:8e:2d:
53:0d:58:56:cf:69:54:2b:4a:ef:52:83:23:e4:f9:
35:67:1f:80:e9:11:39:f7:10:2d:66:ea:1e:63:d8:
ee:0d:bf:14:d4:4d:a5:71:9c:b3:5e:dc:bc:ed:9f:
e3:af:cb:b3:a1:e7:9f:82:48:e0:d3:ad:fc:39:a9:
91:0d:25:44:fc:01:01:28:d9:91:69:ce:d8:8a:7c:
04:43:d9:70:03:80:c0:fb:fb:c7:6e:0f:7a:a8:ad:
7e:90:aa:73:3d:88:28:88:37:62:32:26:ee:52:bd:
dc:3b:7b:b6:84:8f:96:2e:ab:be:b4:8b:06:63:b3:
36:a3:50:e7:f2:d5:bd:df:52:bd:4c:be:53:3f:43:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7C:63:D6:F6:3B:33:23:51:70:83:7A:6D:40:75:C7:27:B0:4C:49
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7e:cb:15:02:0c:36:30:1a:ea:04:0b:66:d2:88:1f:6f:e3:
5e:3f:d3:5c:cf:61:98:d6:74:38:c9:df:a4:b5:81:7b:b8:74:
a9:90:e1:11:20:38:7a:a9:2b:63:98:25:4b:cd:d0:c7:86:48:
8d:9d:c7:21:54:99:80:c3:54:82:a4:87:ae:54:08:3c:8c:5c:
b9:99:e6:e1:5e:27:e8:48:d8:68:5b:c2:d3:c9:c4:47:fc:3f:
d1:ba:2c:f9:2d:4c:e7:99:42:c9:2a:15:b3:40:da:5d:3b:e7:
3f:0b:ec:b5:a3:4a:9a:da:90:10:e3:79:d5:c5:23:74:38:97:
cf:9a:5b:6e:a0:eb:f5:be:e3:d6:a6:25:90:1b:d7:0a:15:d7:
75:a5:47:73:a6:88:bb:e3:5b:74:59:88:30:d5:51:ce:c0:72:
0d:6f:00:11:34:95:8f:c1:8f:02:a2:8c:12:7e:0b:22:77:14:
e9:71:ba:76:cb:6a:78:05:1d:57:af:c0:05:5f:7c:c2:d1:68:
5c:71:8c:76:5a:06:4c:50:92:42:46:3d:6b:3e:6f:a6:85:29:
58:c3:4f:57:3d:2e:0a:e2:ae:aa:bd:d0:19:1b:5c:dc:a8:bd:
64:a4:68:63:48:8a:30:b9:fc:4a:9a:92:c3:14:05:f2:4b:d6:
f1:bb:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:51 2025 by rpki-client