Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: k0HyMu4llw/ZG/wCa31tfkl8NZAFxiUJfzDOGJ5h/zI=
Subject key identifier: 62:13:EE:C0:44:21:3F:B6:9B:F4:FE:D3:C4:91:1D:F2:D8:E2:38:2E
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019A4DAA87C1BFE20F3333B11F93331B06B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0DEB
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: gvZbwzTbc7EJtGJwm9VDDtob9jChK22CX7Si3jtJfHM=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:87:c1:bf:e2:0f:33:33:b1:1f:93:33:1b:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=6213eec044213fb69bf4fed3c4911df2d8e2382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:67:25:c8:d6:a3:21:a6:74:a4:b2:71:09:
85:7e:7b:3d:7e:e1:1b:9d:fb:ae:2f:0f:ce:b0:11:
69:75:39:6d:95:75:b1:e1:20:2c:53:01:f3:41:0d:
21:19:75:7f:40:b2:85:14:07:0d:2e:eb:51:8d:93:
90:99:c5:d6:e2:e1:6b:0c:fe:88:ee:ba:14:4b:6e:
e8:87:8e:52:7a:64:b2:34:07:44:16:c9:2f:11:bb:
e6:da:7b:dc:34:7b:ae:1d:82:28:bc:7a:81:a6:9d:
c2:e1:ae:15:9c:2d:e8:27:80:f0:2c:9d:dc:11:12:
87:4c:b6:f6:cf:f1:f7:b0:39:74:37:23:50:5e:02:
4b:fd:05:0f:1b:14:66:e9:18:42:25:fe:d0:3f:f0:
3e:50:a9:06:cc:e4:0a:93:f2:84:29:da:2a:b4:cf:
af:26:d3:a0:ac:c2:0c:81:3a:ef:9f:13:29:30:86:
f0:e0:01:d7:74:79:42:68:47:b6:73:d6:27:94:19:
2d:7c:b6:10:75:64:73:39:7c:9b:4a:5a:76:6e:0f:
37:f7:a2:a7:d9:3d:4f:9c:f4:6d:5a:d2:ee:91:da:
1e:f5:4d:d6:06:f5:12:71:15:fb:7d:5a:88:93:f0:
11:48:e6:07:06:ba:68:9a:af:ab:a9:af:3b:e4:f6:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:EE:C0:44:21:3F:B6:9B:F4:FE:D3:C4:91:1D:F2:D8:E2:38:2E
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:f9:d6:f9:d9:ec:fe:2d:61:4b:dd:49:32:37:de:b2:4b:
31:e7:1e:36:ac:a8:68:eb:7e:6c:26:26:ce:16:a4:46:57:a5:
3f:18:5e:cd:9f:5c:9f:0f:a4:ed:8a:6a:c3:21:88:03:89:fa:
b3:ca:70:55:e1:79:ce:f0:d4:9c:7e:85:fc:f3:b0:92:0e:af:
89:56:43:37:d5:a8:5e:f4:84:69:89:68:75:0b:6c:39:6d:ab:
80:ff:ae:4f:c8:ac:2e:a9:f3:69:35:f8:e8:fd:2b:b4:63:5c:
37:ad:43:dd:14:2e:3c:23:be:ca:84:c7:48:7f:c5:a1:97:13:
e0:7f:84:cc:1f:08:76:8d:86:f8:0d:95:0c:3a:6f:82:34:16:
71:c4:ad:80:42:68:bc:b3:63:5b:52:24:80:a9:90:e8:57:83:
9a:3e:c5:a3:3e:de:27:b9:81:72:ca:8d:1a:6d:dc:ba:33:87:
66:ef:b5:77:35:79:62:c6:34:82:cf:28:49:6c:e0:69:90:56:
56:8d:8e:fe:aa:bd:9f:3c:f5:35:b7:82:6c:f5:b7:3d:c8:c3:
87:9e:0e:bc:21:4f:c2:5b:2c:4b:1a:63:a1:c2:5a:d3:01:3f:
1e:25:f1:ba:34:73:ee:f7:21:30:e8:e6:85:e3:d7:56:f9:99:
a7:6e:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:20 2025 by rpki-client