Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: aROpC7DM48WRptdBfAsimeZgOyMgMRpmVGKnubUMS6Y=
Subject key identifier: 2E:C1:02:35:93:B3:83:05:2B:60:7B:C1:29:77:E9:10:4C:B9:BA:76
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019A51514F65A8A53612638BFA9419B12DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: F9
Signing time: Wed 05 Nov 2025 00:01:14 +0000
Manifest this update: Wed 05 Nov 2025 00:01:14 +0000
Manifest next update: Thu 06 Nov 2025 00:01:14 +0000
Files and hashes: 1: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (hash: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: /fSfrcCewb14yoty+NWsmunHz8R9vScs5gIe2MfQr3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4f:65:a8:a5:36:12:63:8b:fa:94:19:b1:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Nov 5 00:01:14 2025 GMT
Not After : Nov 6 00:01:14 2025 GMT
Subject: CN=2ec1023593b383052b607bc12977e9104cb9ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:3c:50:67:2a:b3:3e:b3:66:35:e7:2c:41:
89:8a:c0:e8:8f:46:f5:fa:c8:b8:f5:49:e6:d2:1a:
c9:c8:4c:d3:02:14:38:ef:fd:75:e0:d0:3e:d5:fc:
7b:d3:7b:5d:d1:f6:08:d2:03:9c:0d:78:d2:d5:10:
75:f4:af:4d:2e:da:66:ce:3d:74:cb:95:38:f2:1b:
33:e1:39:30:54:f8:18:33:ad:df:66:1d:4e:88:3a:
17:f5:e4:9b:51:cb:d6:98:85:23:ef:f3:b1:bc:39:
a2:77:10:33:f7:c0:39:8d:ca:7d:d8:2d:dd:73:f0:
77:de:df:4a:28:a8:b7:06:64:5a:35:2f:9f:54:b2:
c5:f2:a1:78:fc:ad:83:98:54:be:91:df:3f:74:7b:
84:84:db:c7:2a:b0:51:98:71:88:a8:ff:4e:3c:49:
e7:34:07:b6:35:0a:eb:e8:d4:8c:56:34:c0:b8:1a:
87:75:d3:38:9c:2c:33:ae:dc:b0:4e:ac:a9:07:2e:
42:ea:2a:b6:26:21:55:c3:03:7a:a9:18:c7:61:27:
cd:1d:40:9c:86:6d:e1:4f:0c:06:7b:09:f8:78:0f:
23:61:c3:e3:a4:dc:f7:87:09:72:f4:cb:14:f7:ed:
bc:a4:f5:2b:5b:66:61:d9:bd:a6:d8:85:68:e6:73:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:02:35:93:B3:83:05:2B:60:7B:C1:29:77:E9:10:4C:B9:BA:76
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:77:cc:02:c6:15:75:b3:b4:96:56:e6:64:5f:3d:4a:de:79:
cf:24:d2:d5:5e:0c:30:c8:53:9f:6a:70:45:48:fa:eb:0a:17:
e7:3c:b0:73:a8:42:27:eb:4f:66:9d:e2:4c:65:f0:a4:82:1f:
74:79:1e:45:4e:c9:09:6f:78:c0:a8:77:57:61:11:65:8d:1a:
a2:04:eb:36:cc:c6:f1:e7:c2:3c:02:53:b9:01:63:43:93:b8:
f6:3c:60:6d:78:e5:67:57:75:c9:e1:bb:13:5f:00:4f:67:8c:
11:56:32:c1:39:29:a7:6e:55:34:ce:0b:4d:c4:de:92:42:60:
58:0e:89:b7:ac:ea:18:16:84:5f:70:ea:27:49:52:74:8a:d4:
e1:95:6c:39:53:f3:00:a9:cd:e3:f7:85:7a:48:6e:b4:38:5d:
19:2a:48:84:c7:34:7b:22:3b:34:d7:08:37:c2:cf:ee:32:4c:
c2:cf:1f:ab:2e:79:d0:b8:64:cb:25:1c:6f:9e:76:aa:37:0e:
80:e7:a6:dc:12:c4:f7:69:fa:c8:da:2d:a2:4f:f1:76:ae:37:
3c:0d:e9:a1:cc:65:d0:63:18:ba:cf:f8:f9:29:cb:f3:71:62:
c0:2d:70:01:01:fa:be:14:2f:11:f3:b9:78:1e:dc:15:11:97:
93:39:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:50 2025 by rpki-client