Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: CC7koJGSe4zwd0tH/6uC+TgCUidF9uT2E4h2+M/SjeI=
Subject key identifier: 31:65:76:5D:AD:B8:7E:41:D6:1D:42:8B:60:99:1C:D9:26:29:54:4B
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019A54C0ECA98FD9D427199A292D9ACFD134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 04EC
Signing time: Wed 05 Nov 2025 16:02:00 +0000
Manifest this update: Wed 05 Nov 2025 16:02:00 +0000
Manifest next update: Thu 06 Nov 2025 16:02:00 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: YzKr5lGCzt2VEWcVa1xAgILtd04Tx2wce1bVhLb75as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:ec:a9:8f:d9:d4:27:19:9a:29:2d:9a:cf:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Nov 5 16:02:00 2025 GMT
Not After : Nov 6 16:02:00 2025 GMT
Subject: CN=3165765dadb87e41d61d428b60991cd92629544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:3a:ea:ca:22:ff:6f:29:1b:72:0c:1d:e2:
f1:9c:b7:b0:75:9d:cc:14:ba:9c:18:c6:50:92:e1:
09:32:c3:fa:ce:90:3d:3c:ca:b4:18:c3:30:36:6a:
7d:27:90:8e:a6:f0:05:69:e3:49:de:1a:a2:1b:54:
07:41:3e:73:be:9b:db:6e:85:d6:29:77:5a:c0:46:
30:30:ca:fb:77:2c:e7:64:6c:da:68:5a:bd:b6:ab:
d7:4a:f2:64:b8:47:74:77:0c:90:2d:31:6d:8a:61:
96:24:51:19:9f:8a:ac:17:a2:9a:0d:96:85:6a:79:
33:f4:59:68:d4:0b:b8:6e:3c:5d:84:1f:a7:e1:0b:
e9:93:e1:e0:1a:03:b8:5c:56:e4:d8:5e:b6:28:9b:
c2:ba:78:4a:88:a9:52:ba:5f:e8:01:71:e0:41:e0:
c4:66:6e:a2:90:04:ed:c7:e4:ca:4c:ec:a1:05:64:
e8:a7:92:20:98:0d:9c:60:92:86:5e:cb:b7:d9:86:
b5:5f:70:e7:01:7f:25:00:81:38:c7:a1:bf:e3:81:
c3:26:b5:7f:a4:c5:81:b8:2d:c4:97:70:6d:41:fb:
dd:4e:7c:c0:95:94:b8:78:a1:71:93:05:f3:cd:26:
d1:52:7a:18:8d:55:55:23:19:77:d4:28:a4:99:df:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:76:5D:AD:B8:7E:41:D6:1D:42:8B:60:99:1C:D9:26:29:54:4B
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:7d:0a:0b:05:a5:c5:3f:ac:de:13:75:ba:4c:83:59:0e:
fa:bd:53:48:e6:02:53:ab:7c:e8:ab:b6:f4:04:7a:eb:12:46:
e1:13:68:c3:82:1b:ab:79:c0:2b:f3:0e:e3:1f:46:f3:5d:a9:
ca:08:b1:68:c6:3e:41:2f:04:ec:40:de:da:0d:cb:4c:8d:6f:
c9:31:35:5b:81:ad:0c:a9:66:7d:a8:e4:71:f5:12:d4:b2:2e:
6e:6f:b8:fd:5e:42:73:5d:31:30:40:b6:52:8b:88:4c:49:c6:
7a:a1:66:28:3d:46:b5:c7:c6:36:da:30:39:f9:96:de:7a:ea:
1c:c2:c7:4f:5c:7a:40:1c:0e:8c:9a:2a:08:73:d0:44:1f:04:
8b:0c:4e:b4:fb:73:16:bd:50:a4:09:9c:e1:b0:aa:9f:20:c0:
3e:81:e0:aa:69:f1:c0:10:cb:46:7d:d9:90:4b:e9:a5:e0:f0:
e3:41:07:0e:6e:3a:96:1f:00:ca:9f:b6:ff:39:41:15:00:6c:
68:9d:93:69:11:d3:93:01:92:31:2b:f1:ff:37:36:59:7d:fa:
2c:00:1c:23:79:0c:f9:97:6a:ed:cc:59:fb:83:ef:3a:f4:fc:
59:46:5f:fc:5d:66:ed:7e:14:e1:b8:2e:bf:94:ae:f6:00:4d:
9f:44:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:55 2025 by rpki-client