Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: LD6iz767BiKz8IbSG3xGoTSqufXcxFYc7VogTy6QVUk=
Subject key identifier: 8F:F3:F5:E5:B4:04:7C:60:D9:70:F8:E7:DF:A2:2A:F7:79:86:80:C4
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019A51BEC0E289D03A0F5D9FD4C6F6BB8291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: E1
Signing time: Wed 05 Nov 2025 02:00:46 +0000
Manifest this update: Wed 05 Nov 2025 02:00:46 +0000
Manifest next update: Thu 06 Nov 2025 02:00:46 +0000
Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=)
2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: IzRw6ZQeGiUuFnlNXvtUo8lDEjVI78/X8prkNgq2TE0=)
3: RpIHAkjNePBkljRPnB1JIyBSnvw.roa (hash: qyk9tqBXRznFnx7BG2DU1S+w/7N7AXbDrx47mo90s+Y=)
4: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c0:e2:89:d0:3a:0f:5d:9f:d4:c6:f6:bb:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Nov 5 02:00:46 2025 GMT
Not After : Nov 6 02:00:46 2025 GMT
Subject: CN=8ff3f5e5b4047c60d970f8e7dfa22af7798680c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:56:ba:59:7f:7c:40:a5:55:23:54:b8:55:
4c:32:66:f0:06:54:5c:fb:3a:f8:43:56:5b:fc:b3:
10:0a:cd:8c:ea:d4:3d:3f:b2:f8:da:0e:4c:68:3b:
ef:c5:82:20:d9:8e:51:c6:ea:6b:d0:11:65:51:2a:
3a:b6:b1:3f:bf:62:4d:2b:76:1d:0b:af:5c:dc:12:
c6:5f:af:bb:55:5d:25:a3:9d:f9:6c:32:9a:0f:f1:
ac:48:0d:fa:64:30:ca:90:b0:9a:e6:bf:4e:c9:1f:
dc:41:13:b1:c7:f7:fc:8d:f8:a1:01:11:ef:98:5f:
cd:40:90:cf:b0:21:76:ea:13:20:e5:9c:c8:49:b5:
46:4b:b7:a5:f3:ef:5d:22:fa:b7:79:a5:fd:4b:f3:
a8:87:4f:78:49:90:15:d1:74:11:27:64:99:ee:c5:
00:8b:c1:1e:29:c4:aa:a3:54:28:e7:a8:f4:02:b1:
ec:b6:39:09:ad:ff:68:63:49:26:a4:9e:1a:0b:e5:
d2:84:0d:97:f6:3e:bb:60:94:b4:d2:10:e8:25:80:
95:e4:6e:14:58:5a:ba:89:24:3c:4d:90:54:a2:ea:
36:28:e4:2e:3f:fb:54:60:80:4a:b0:00:1b:80:8c:
a7:14:e2:28:57:4c:f6:4c:68:e5:ce:bd:8e:7d:91:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F3:F5:E5:B4:04:7C:60:D9:70:F8:E7:DF:A2:2A:F7:79:86:80:C4
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:47:6d:b7:fe:bc:ef:8c:6f:f9:a2:9c:e3:35:8b:04:7c:
75:a0:5a:cf:78:01:b7:9c:75:a6:e3:8e:0f:12:1a:08:e8:9c:
83:86:0b:a4:c9:59:43:de:32:f1:1e:b3:6c:b3:91:57:25:0e:
04:78:79:38:aa:97:72:63:c6:1f:50:aa:9e:4c:65:d2:6a:e1:
72:0d:65:ef:17:e5:02:fc:9b:d7:1d:58:2f:56:0f:6e:49:2f:
dc:b4:09:60:73:c9:ab:34:72:b2:b8:4c:26:e0:72:aa:8f:ce:
15:f2:da:a4:b0:54:75:4b:d3:19:e8:a3:8d:96:a5:d8:d9:8e:
ad:e0:01:56:6f:aa:86:4b:95:cd:2d:c9:9b:91:05:0e:ce:2a:
4d:31:61:d9:bf:9e:19:dc:ec:59:c6:8e:89:f9:52:26:a4:4e:
44:e0:b3:b0:b2:39:11:f4:8c:d4:1f:e6:88:02:be:c0:0a:07:
ab:ce:37:3c:54:75:70:84:1f:86:07:cf:d2:aa:ed:40:f7:ec:
25:c2:9e:4d:85:06:36:af:43:04:2e:b2:7e:50:53:24:32:4c:
53:85:38:b2:df:19:ac:fa:7b:15:3c:44:6e:d0:ff:9a:18:fe:
5c:53:dd:e2:c0:a1:35:08:ca:d8:24:dc:72:90:00:19:d3:99:
f8:c7:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:17 2025 by rpki-client