Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier: Zi5djcU4aSLTaJ2nPj24e18yETFnB5Mllm34Rif3WOM=
Subject key identifier: E1:7B:1D:5D:70:D7:0E:1C:31:6F:20:4C:0D:CB:38:F7:41:90:30:EF
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 019A51879B79AC281EA6B96E251844C22EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number: 138D
Signing time: Wed 05 Nov 2025 01:00:32 +0000
Manifest this update: Wed 05 Nov 2025 01:00:32 +0000
Manifest next update: Thu 06 Nov 2025 01:00:32 +0000
Files and hashes: 1: 4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa (hash: gHv/lKe2wiiXicxKTk0LqrVMj7gKuLxC/r7kKNYFngU=)
2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: Hf1XV9PtWWn5V5XsFvrNfy9/c2CdLEpiszsmSE4U0Zo=)
3: QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa (hash: OsX42YWLb/xupxzQu7af5C3oGi/EIsV+i9iPTy5PezE=)
4: VupnGTTOfrBpe5_ufe4-GMR0Hao.roa (hash: RJZvVW8Owbg4R5MLF9yvr42vDFcG2psZgHSUWvn3eSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9b:79:ac:28:1e:a6:b9:6e:25:18:44:c2:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Nov 5 01:00:32 2025 GMT
Not After : Nov 6 01:00:32 2025 GMT
Subject: CN=e17b1d5d70d70e1c316f204c0dcb38f7419030ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:c9:e0:89:15:03:3b:9a:65:58:d3:fc:b7:
38:18:16:17:df:8c:46:e3:72:c1:3d:7a:3a:3f:0b:
55:f4:1f:d4:f9:46:88:bc:a9:40:a8:f9:69:7c:cf:
10:c6:b5:5b:12:2f:58:32:71:90:c7:ea:b8:39:0d:
5d:84:2f:af:91:f0:e6:d4:f0:b3:66:f3:bb:5f:c4:
b5:91:8b:47:4b:a8:42:46:a8:e2:44:e2:06:e2:d8:
28:03:76:fb:e8:e8:47:a9:33:7c:de:7e:7c:f9:53:
ff:50:de:e2:bc:14:08:34:61:d2:58:f0:90:da:03:
d4:c0:df:70:ec:9d:be:a8:63:f8:61:57:ac:fd:94:
8c:21:bc:26:76:a6:a7:9d:64:8d:2a:fe:3c:a3:3b:
56:09:7e:3e:f3:2d:da:c6:d7:2d:a6:7b:63:0e:47:
6a:60:21:7b:3c:0b:ca:7c:b1:be:5e:90:b8:42:80:
6d:ed:51:6b:0c:38:39:57:41:55:eb:d5:9f:59:b8:
a6:f9:d5:50:18:83:4b:92:f5:d5:b0:ec:7a:6c:d1:
c3:31:b8:64:1b:6e:12:af:bc:2c:1f:85:15:e2:ef:
40:74:cd:1a:e1:b6:fc:aa:ae:be:db:bd:41:11:45:
18:42:93:b8:a5:ba:c0:57:37:d1:f4:78:0a:50:54:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:1D:5D:70:D7:0E:1C:31:6F:20:4C:0D:CB:38:F7:41:90:30:EF
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:36:38:c1:57:08:40:43:28:e7:e1:b7:94:93:07:f5:84:ce:
f8:e1:2c:ed:28:a1:11:58:bf:f4:f0:dc:5f:87:ac:48:77:31:
43:ff:6a:4d:bd:c5:71:13:99:78:52:ea:2b:f4:7d:58:06:3b:
12:79:e6:c8:7d:b2:f3:d0:64:6e:de:40:71:d1:cf:74:7a:6c:
3e:2f:c0:d5:d8:c7:c9:8b:46:95:15:a2:a9:1c:f3:c7:51:89:
a4:bc:ac:ee:77:72:89:c8:81:1b:7e:d3:f9:e6:e0:58:63:a3:
95:20:12:17:2c:63:4c:be:2a:cc:dd:fb:b7:bc:da:24:17:90:
9d:55:d7:c4:38:9e:c8:b1:5a:d4:6d:ca:2d:52:3f:6a:87:c6:
28:c3:db:08:fb:2a:e1:c3:ef:7c:00:63:a0:11:8a:68:f4:56:
26:af:58:f3:5c:bc:8f:42:bd:31:14:6e:11:44:c7:26:85:40:
dd:08:ed:bd:44:c7:a1:ee:b8:61:54:d5:ba:27:9e:45:a3:f3:
cb:e2:2b:8d:2d:d7:83:11:f7:3b:11:85:d8:36:41:84:02:38:
57:59:5f:6b:f4:e7:28:f1:b0:78:57:92:19:6a:35:bd:01:50:
5e:e3:45:8e:09:c3:d6:45:c0:bb:7d:57:d2:bd:60:53:4a:22:
56:44:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:37 2025 by rpki-client