Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: /fKFJPw5FwtjkFb/zR0SvZDGqE0ycxq+71QdFQqngAQ=
Subject key identifier: E5:55:F5:5D:D2:9A:99:3D:36:99:E9:8E:FD:53:62:54:03:FD:CD:2C
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019A4E86361BBEDDD945CC73457E37B27BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: EqOJ2B3lB8KmooIGJTxfe92IeH5wM1cFGaWgGRrdXRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:36:1b:be:dd:d9:45:cc:73:45:7e:37:b2:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=e555f55dd29a993d3699e98efd53625403fdcd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:23:b5:ef:69:97:44:09:bf:89:1d:53:29:
01:fb:2a:8a:45:a0:6e:4b:b8:cd:8e:c5:22:b0:37:
c7:f1:e6:74:e0:f7:68:8b:3a:65:98:f1:e1:d8:17:
96:80:a6:83:a7:a3:d7:fe:f5:21:58:6d:3d:c3:55:
ce:64:ad:05:62:33:98:d1:76:dd:95:98:01:4e:15:
28:8e:d8:87:36:06:b7:ed:b2:5f:d9:a2:78:18:85:
5b:7c:a0:e7:97:bc:23:6a:3b:0d:d4:7e:07:36:d3:
3f:56:2a:8f:10:3c:42:11:01:e1:1b:ac:66:0b:98:
4d:ff:90:d4:64:36:b1:4f:4b:11:57:49:01:8a:df:
c3:84:0d:af:ce:e8:0c:df:89:10:ab:22:2d:4a:57:
34:71:eb:ac:98:98:f4:65:40:29:18:fb:8d:b0:15:
a2:18:a3:1a:6c:ca:65:21:d2:07:ce:86:79:6e:b7:
d7:ff:20:94:8c:6a:1f:0f:75:c3:35:cb:bf:07:81:
91:74:5a:62:b7:1e:1c:29:f3:17:8e:11:c8:1a:d6:
43:35:d4:f0:5e:a0:30:50:ea:ed:67:28:a3:03:77:
b1:81:18:14:70:81:d3:51:96:0c:40:76:31:37:2f:
44:5a:0f:f5:21:4d:78:77:ce:09:29:a3:0f:80:b8:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:F5:5D:D2:9A:99:3D:36:99:E9:8E:FD:53:62:54:03:FD:CD:2C
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3c:81:21:6b:a1:4e:79:99:e0:50:9b:86:bb:8f:de:69:2d:
9c:30:63:db:89:43:6f:de:39:49:20:a7:3b:aa:21:5c:61:70:
81:12:39:b8:73:6a:3f:3e:3d:d6:d7:8e:77:18:ed:98:3f:c3:
a2:fb:49:e4:9a:77:22:3b:a9:77:8f:7c:88:6f:dc:1c:78:68:
23:49:47:86:4a:86:c7:21:22:de:1c:c5:01:8d:f6:13:b0:65:
fc:ee:1c:84:43:53:eb:96:f7:30:18:94:60:78:76:c2:71:e2:
09:1a:f8:07:e7:f8:19:db:0d:60:62:22:2d:f7:99:53:51:ba:
f8:e2:86:9e:6b:17:ee:1e:82:8e:b8:78:35:e2:4d:00:51:13:
61:0c:ca:e5:d0:7a:32:63:df:4c:c3:a3:f9:c7:18:aa:a7:1a:
05:f0:18:34:d1:ec:3a:d2:bb:3e:a7:01:82:36:58:a6:75:8d:
87:fc:45:18:03:5e:fb:6e:90:b7:41:03:d7:02:9e:48:4c:dc:
f4:94:dd:72:79:19:48:bb:a3:ba:5b:7a:79:31:98:03:b6:e9:
81:7b:43:ec:45:75:d1:3d:0c:53:0c:d3:0e:9a:23:44:00:6e:
32:b3:ce:54:54:f8:22:80:48:8d:ef:f8:73:71:d8:40:ef:fb:
1a:2b:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:53 2025 by rpki-client