Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File: rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier: hCnvTDEy9CrLvI+GMi/gy2eBI+cd+i0cLBrgGoYHles=
Subject key identifier: CA:4F:4B:EE:12:B6:7A:29:91:0F:CA:A4:18:1D:B5:5D:BA:87:1A:20
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer: /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial: 019A4E4F30F4819BB83EA355A71745BD8FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=)
2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=)
3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=)
4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=)
5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: lHU3TCgAhP1cFUOvjfL1N4flUBzgIq6XI4bpvW0LvGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:30:f4:81:9b:b8:3e:a3:55:a7:17:45:bd:8f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=ca4f4bee12b67a29910fcaa4181db55dba871a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:25:8e:0e:02:df:ff:cb:63:58:d8:b1:07:
10:bf:91:67:fd:58:c9:02:95:c8:a3:a6:48:7b:2c:
db:3e:b8:1d:7f:9d:95:41:d2:06:37:02:b6:47:3a:
31:35:57:52:41:5f:aa:87:e6:4a:f3:61:38:02:97:
b6:a1:58:3c:db:97:6a:59:d6:fa:b3:27:48:fd:73:
b2:e2:76:ac:59:28:90:cf:b0:7f:03:7e:c6:8b:20:
7d:0a:65:90:da:89:10:92:5f:07:6b:ac:79:32:2f:
4a:2f:33:e4:18:c2:c4:66:b6:dc:9b:86:f4:63:f9:
d7:1f:2e:66:23:28:d2:d2:7c:9c:3d:03:93:84:dc:
eb:8c:3e:a9:93:56:16:8c:88:28:c4:ea:e6:b8:cc:
73:e1:57:45:3e:ed:bf:b1:fe:74:db:a0:e1:0e:b5:
09:9e:48:d6:10:ab:f8:53:cc:c4:87:17:27:51:f9:
cc:1b:c8:1a:ba:09:93:18:b4:80:3c:74:b0:53:7c:
71:d8:1e:9d:20:78:8f:05:16:40:b8:96:f8:6d:6c:
7d:34:cc:c9:7b:63:8b:bd:27:60:62:3b:95:61:e3:
93:be:3f:f6:a8:91:0b:0b:05:95:7b:9b:f2:10:37:
d6:ad:08:63:fc:3a:a1:8a:b9:e3:53:b3:1f:84:ef:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:4B:EE:12:B6:7A:29:91:0F:CA:A4:18:1D:B5:5D:BA:87:1A:20
X509v3 Authority Key Identifier:
keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b1:35:9b:4f:71:17:b7:a5:16:36:49:22:b4:7c:16:67:cc:
f9:00:14:ee:68:54:93:b9:bb:6d:92:0b:22:91:83:be:0c:76:
3b:81:40:8d:9f:e4:a3:3b:cd:70:d6:2a:32:7e:27:47:96:2b:
f7:eb:1d:66:74:e5:03:1a:78:e9:5d:c3:ed:d1:5e:59:d7:57:
1e:03:1c:2e:76:40:b6:8e:a0:a0:61:38:ef:39:d6:2b:de:fa:
18:3b:42:4d:d4:0c:22:ee:a1:f7:3c:f2:8c:aa:67:4a:9a:e8:
71:2f:60:9e:3c:3c:a5:7a:b6:c5:58:b2:48:44:d7:6a:42:eb:
14:b8:4b:11:6c:cf:2a:0d:11:92:88:64:aa:a6:a7:bf:7f:f9:
56:76:65:46:ad:75:d9:3b:cd:e4:c8:6a:5b:13:e0:ba:d9:90:
93:30:c8:eb:98:ad:f9:6e:95:d4:a4:6c:1c:cf:1b:b4:31:5a:
54:3b:8b:bc:fd:d3:5e:ff:49:3c:c6:aa:e6:f0:34:05:9a:6a:
5a:94:17:23:1c:c3:60:ae:ad:36:3e:44:af:07:22:4f:15:ca:
cd:e0:58:7a:d2:2e:b5:d4:31:06:07:e0:ae:38:f2:8e:6c:8e:
20:a6:00:8d:c6:1b:9f:1b:80:8f:70:42:c8:cf:83:22:51:35:
64:ad:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:08 2025 by rpki-client