Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: 0FyH/jgHfAqW93mQ4nzGxInQWE7hCMZqTj4E53sePMM=
Subject key identifier: E9:00:20:25:DD:08:02:5B:9D:B8:59:A1:9A:4A:CD:C4:80:0B:70:91
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019A4F2B04E647441ACB001ECCA71581781F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: Gff74ORgSBky8KzHQFTZx+/xRI0f8w3X9sNeJ+7VN60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:04:e6:47:44:1a:cb:00:1e:cc:a7:15:81:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=e9002025dd08025b9db859a19a4acdc4800b7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:97:3a:87:87:fb:8d:ac:52:e7:df:47:f5:
22:5b:87:85:b2:81:58:2e:2e:c9:c6:32:f1:53:95:
b8:82:94:04:29:d4:48:00:c0:2f:64:e9:74:16:1f:
39:3d:c2:49:67:7b:0a:6b:d3:e5:ae:11:08:2f:c6:
ca:a3:e9:b7:77:10:3e:98:d1:11:1d:f8:71:de:a6:
1e:fc:b7:50:24:21:af:ac:73:39:a9:e2:bb:99:7c:
1b:94:d3:c1:11:56:e9:b5:59:aa:b6:0d:6a:6b:56:
ef:42:3e:fb:14:a1:54:d1:7b:b7:19:dd:c2:26:ad:
48:e7:24:fd:e6:a8:07:c9:00:f4:7e:36:b3:17:3b:
fa:14:21:26:8c:4e:4d:1e:bf:1e:05:16:1b:b1:bb:
ec:d3:04:5b:3d:a7:68:dc:da:10:97:84:8f:43:b8:
9d:c5:ce:3b:ad:46:f0:f3:5f:b7:0c:c2:a1:61:4e:
4d:62:7d:63:a8:b8:1a:c9:b7:1c:2c:52:c5:5e:20:
87:8f:b3:e3:52:8d:07:ce:a7:90:47:30:a8:cd:26:
48:2b:b8:fb:c2:1f:9a:03:b2:7a:e5:79:5e:80:e5:
45:1a:77:dd:32:a9:e3:54:4e:cb:75:a5:cb:4d:c8:
af:2d:03:e1:5f:4d:1d:23:9e:94:31:61:b6:4d:2b:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:20:25:DD:08:02:5B:9D:B8:59:A1:9A:4A:CD:C4:80:0B:70:91
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1c:2f:3a:8b:59:c4:5f:ea:91:7b:20:86:a1:c6:06:2b:3a:
01:53:88:ad:cb:6a:90:e0:b2:f5:78:63:e4:86:d6:3a:39:b9:
6d:0c:97:02:54:03:48:41:29:46:bf:28:77:ee:3f:87:72:02:
a8:d9:ee:77:92:9e:dc:7f:9c:e0:eb:7f:d9:18:a0:db:27:37:
02:2b:2c:8c:2f:8e:24:a9:85:37:80:e5:a6:dd:a5:0d:67:c1:
dd:42:5d:9b:48:a4:c7:19:a2:84:37:30:83:de:fc:18:53:97:
bc:3c:91:02:52:9f:12:39:0c:97:b4:ae:93:e5:16:bd:3d:4d:
0e:17:2e:a8:c0:69:67:ee:0a:08:eb:ed:ee:d3:dc:ef:c7:43:
aa:0d:b5:03:94:a3:21:a1:10:55:e4:a2:6c:99:58:46:9d:30:
d2:8e:58:ed:68:47:0d:70:d2:a0:fc:19:5e:bd:d5:a7:ee:64:
6c:84:8c:d7:a2:fe:76:5b:c8:fb:4d:d9:82:d3:83:2f:f5:76:
e7:a2:ec:6f:34:82:e3:76:e6:6c:67:1d:a3:0a:42:8c:d3:c2:
15:c7:31:9a:6d:3b:eb:bc:99:a0:30:93:98:53:96:19:4e:34:
0d:4b:eb:2e:ac:ca:cb:fd:97:42:c9:82:50:7c:05:48:66:c1:
41:53:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:19 2025 by rpki-client