Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: slOrvMh2NXiYD5BA3MITRvD0TbkPcUJWRdg+NVcTIdg=
Subject key identifier: C2:B7:B5:8A:3D:4F:9D:96:72:40:A6:A1:D3:9A:BC:41:8D:5B:28:7B
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 019A522CD6AAE1ED20A0D3E86EDEA1056459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 1135
Signing time: Wed 05 Nov 2025 04:01:01 +0000
Manifest this update: Wed 05 Nov 2025 04:01:01 +0000
Manifest next update: Thu 06 Nov 2025 04:01:01 +0000
Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: DxukGtHlLF00MVWHsB5C4ngaYkMDF0edvmEHXP/0mXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d6:aa:e1:ed:20:a0:d3:e8:6e:de:a1:05:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Nov 5 04:01:01 2025 GMT
Not After : Nov 6 04:01:01 2025 GMT
Subject: CN=c2b7b58a3d4f9d967240a6a1d39abc418d5b287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:62:d2:1c:38:2a:3f:a6:a9:70:cb:38:5e:
ce:d8:b1:6b:93:bd:34:2b:36:ea:59:18:ea:35:02:
d2:2a:24:f0:e2:2b:13:53:d9:bc:02:a3:2a:49:a0:
71:86:29:73:ac:b1:37:55:55:10:2d:5b:1b:b9:b6:
e3:92:f7:e5:98:c1:ad:fc:8a:6c:1f:5c:06:0b:ee:
d7:67:55:d1:db:5c:4e:00:53:19:71:b1:65:49:e1:
f3:06:38:6c:78:4f:5b:28:bd:a1:29:1d:9c:97:ef:
6e:46:85:fd:91:51:b9:3d:90:9a:ce:bc:b7:da:1f:
bc:94:81:bb:9b:66:db:61:ef:9d:ac:ae:80:de:b0:
70:a2:a4:9f:7d:99:18:49:fa:3d:e2:f5:83:5f:a9:
58:43:f7:1b:0a:c4:aa:4e:8b:9b:0f:55:4f:ac:5b:
f8:a4:4b:c2:e5:7f:59:7c:f1:64:23:24:4e:0e:23:
0f:f0:b6:09:b2:4b:f6:02:c1:0a:07:8f:4b:66:78:
f0:b1:55:f5:25:f9:bf:36:b6:01:43:3f:f4:83:4b:
6f:6d:f5:22:bb:6b:a5:8e:9c:2c:0e:c9:7f:2e:b2:
e9:52:42:2e:67:a8:88:24:a0:5c:1c:c9:6a:84:db:
ce:7c:4f:2a:5c:1b:03:90:df:42:79:28:4e:0f:bd:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:B5:8A:3D:4F:9D:96:72:40:A6:A1:D3:9A:BC:41:8D:5B:28:7B
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:9a:a8:13:01:8f:a0:1e:04:3e:db:a6:9f:95:4f:ad:68:
9d:73:c7:8e:fc:96:70:13:ed:c4:21:c5:23:f4:49:b3:6b:f9:
07:4d:d5:6e:2a:85:a9:05:9b:6b:45:c5:62:fa:84:cd:fa:73:
b7:b3:33:1b:7b:a8:53:45:e3:dc:d5:cb:62:fa:18:15:15:78:
31:36:e3:54:41:19:79:e4:cc:7a:bf:4d:ec:45:1e:27:98:74:
05:56:fc:3b:7d:09:53:89:b5:d2:af:5d:f9:97:fd:80:e1:15:
7b:78:65:11:e0:6b:a1:a0:94:45:ca:ba:5d:eb:68:4e:b2:44:
f3:41:2a:e2:29:bf:2f:53:9d:de:a9:6e:f6:01:3b:39:ae:3e:
4e:26:7a:8a:a0:fa:bd:9b:99:be:77:f1:d7:94:36:c3:67:ae:
bd:b2:e2:1f:4f:f5:e7:95:76:c9:f8:10:dd:c0:4a:9e:57:3c:
61:6c:dc:f9:a0:75:d1:09:76:07:cd:55:55:eb:ce:d6:14:30:
3c:08:34:60:7e:a0:ea:d6:82:c4:13:90:29:2b:5b:8a:ce:3b:
30:f8:5a:7d:69:88:c9:e0:4d:bb:3b:f7:e6:c8:67:7c:02:52:
dc:bf:0b:b4:ab:f0:62:bb:a0:44:00:35:46:71:70:12:38:38:
74:a3:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:48:05 2025 by rpki-client