Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: +DGON2K6pMl5TlVVscjdrTPGhF813oMzRSfYiFaydVg=
Subject key identifier: 17:5E:65:72:F5:2B:7B:ED:04:01:5C:1F:29:54:B9:B1:01:10:E6:63
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 019A4D3D4240E5AB24931BDA07A101A643D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0E26
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: I4NnNBt2ESrUsNNc6SU0SBida4DBqUO3KmuWP5glQac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:42:40:e5:ab:24:93:1b:da:07:a1:01:a6:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=175e6572f52b7bed04015c1f2954b9b10110e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:c4:43:64:94:a1:1b:a0:7e:29:38:18:24:
14:b0:9a:f8:a2:49:ce:9f:4c:50:43:6c:ef:2c:b7:
8e:4a:6b:2d:9c:69:2a:da:d5:5d:ac:fe:05:05:01:
10:f1:fc:ab:87:37:ff:00:be:f1:ba:dc:40:cf:e7:
59:f4:00:58:4f:0a:f8:32:bd:ae:a9:c4:33:ca:3b:
98:27:5f:ee:05:07:f1:42:5d:c1:e3:93:e5:50:05:
f4:39:4b:5f:3f:7c:5a:d3:6a:b2:f7:7c:6d:9a:90:
13:58:8f:79:61:de:9e:8d:05:f5:cf:8c:5b:d5:d6:
e3:c9:55:37:2c:a5:4d:c0:cc:a2:48:19:44:18:5e:
e2:84:d7:cd:44:e3:7d:58:5d:0c:35:30:6e:2b:c2:
a4:d4:9f:fe:34:9a:71:17:8b:96:3b:ec:13:64:a9:
6b:96:2c:ee:6c:03:b7:0f:71:0d:25:1d:20:ac:d3:
d9:80:e8:8b:54:db:f1:5e:02:7a:c1:4e:b0:30:81:
2d:1e:5c:42:9b:79:ca:0a:68:bd:68:43:96:0d:81:
fd:e7:52:29:b7:66:61:06:46:6d:d7:33:07:8c:f6:
23:8f:2b:56:86:ea:ab:89:3f:fe:ff:80:53:ae:4c:
b8:ac:e1:8a:e2:2d:ab:3b:68:24:5a:36:9d:86:48:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5E:65:72:F5:2B:7B:ED:04:01:5C:1F:29:54:B9:B1:01:10:E6:63
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:64:0e:44:51:47:f3:8d:fe:34:60:fc:d1:eb:3a:7a:fa:2e:
43:84:d2:0c:5c:2e:34:f7:7d:d1:f5:dc:8c:8a:2e:bd:ed:6f:
28:c9:aa:50:50:27:43:f1:2b:cf:21:82:f7:71:d8:62:b7:9e:
75:3c:f4:32:54:77:cb:e5:71:9f:d8:be:fa:c3:c8:ab:99:60:
9e:2d:bf:13:0b:b6:88:58:05:5b:44:74:5a:65:07:a7:d4:fc:
8d:3e:70:be:18:18:db:07:e4:5c:17:98:8a:35:f7:91:e3:ce:
60:05:80:eb:4e:07:30:e1:77:af:94:85:72:ba:32:2f:8b:47:
6c:67:c9:c3:f9:e4:37:32:3b:33:d3:1d:fa:0b:aa:9d:48:85:
0e:56:9c:e7:1f:4f:62:d2:25:ac:7b:63:ee:5b:53:de:7d:81:
df:1c:b6:20:43:cf:db:db:9f:13:dd:21:6a:78:23:22:c2:2d:
a6:e5:ba:4c:a6:c3:a6:33:cc:d0:e9:a9:c0:7d:f0:75:9f:4e:
99:88:2b:e0:27:c3:08:63:64:a8:f3:dc:d8:d2:8c:39:06:e2:
b2:15:b3:5f:36:22:8b:24:a1:10:37:80:cb:c2:f5:df:c4:51:
35:70:cf:37:57:f4:85:a8:90:1b:5c:b1:26:ba:c2:ae:52:07:
f8:3c:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:25 2025 by rpki-client