Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: lUTzRL38y5oda+s/pTEZvE3hFOncNSikmXgO0WTufXw=
Subject key identifier: 3B:28:85:0C:5A:2D:0F:DD:B3:2A:D8:46:57:02:AD:1A:71:C4:2E:BF
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019A503DCB46DF9E5CE81CEF4859B0A62F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: HnjuPgY/q3cs36IPeSVTC69zqE55oFyV68qfuVlOQOM=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:cb:46:df:9e:5c:e8:1c:ef:48:59:b0:a6:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=3b28850c5a2d0fddb32ad8465702ad1a71c42ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:db:8f:ff:32:3f:51:8c:45:c1:2f:b7:e0:
3a:70:04:e5:f4:6a:25:3c:2a:d2:3f:e9:37:dd:3a:
c1:7a:15:ce:c0:a2:60:24:54:99:66:96:10:d9:a0:
4f:fd:9c:43:0f:06:97:88:71:1d:99:33:70:82:58:
9f:47:c8:91:12:5d:45:75:6f:08:66:cb:58:56:db:
c6:c1:36:72:96:c5:44:2b:b5:69:e9:e2:08:1d:f8:
c8:f2:f1:55:82:51:4f:18:8f:28:e6:84:fa:e5:c1:
85:b9:c1:12:6d:e1:64:37:1b:c0:79:db:02:02:b1:
de:4d:1a:35:28:37:11:70:50:7a:44:9d:bf:a6:5f:
59:d8:63:90:1e:87:eb:68:8f:c5:67:18:98:9c:22:
bd:ec:09:46:78:87:54:c8:8b:47:16:2f:82:7a:fb:
54:0e:ce:31:06:28:70:f4:16:8a:9a:b1:83:af:7d:
b2:2c:39:f9:28:21:6a:90:6a:04:7b:d5:f0:65:52:
67:5e:31:e0:8a:fd:5d:bd:e8:d9:00:fe:39:d5:1f:
bb:f1:51:5c:0d:a5:46:68:97:f4:3c:2b:a6:28:62:
2e:fc:a1:de:0e:38:15:7a:10:f8:ee:d8:a1:e0:cb:
bf:69:70:3f:b5:58:bd:61:0b:3e:b2:4d:99:84:75:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:85:0C:5A:2D:0F:DD:B3:2A:D8:46:57:02:AD:1A:71:C4:2E:BF
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:01:05:51:55:5d:79:a9:c4:c8:b0:8d:1f:61:71:c8:7d:
30:24:d7:8b:dc:a7:34:5b:2c:72:fc:13:4a:58:3d:29:92:90:
fe:b7:1d:b8:16:a5:f9:10:85:6e:9e:46:88:e9:da:a1:0f:15:
b6:ed:13:2d:92:96:47:5c:b7:9d:f6:2e:e8:a4:1f:ee:08:92:
a1:e1:5f:da:69:eb:91:02:bd:9d:a9:ec:16:d8:9e:58:f4:2a:
79:20:76:5b:0b:64:3b:2c:30:35:5b:d1:29:ac:5d:f1:39:49:
a7:48:5c:70:96:b9:0d:19:c8:7b:9e:e7:1a:00:81:21:ee:8c:
fa:da:0e:b6:6c:65:7d:b8:68:2b:ec:90:a3:59:7a:e7:9d:6c:
69:6c:79:23:b0:46:0f:11:fd:aa:32:98:8b:f2:5c:7a:43:fb:
b3:90:a9:26:ca:9b:b9:06:4a:d1:01:e1:d2:64:ab:bd:cf:6f:
2a:1d:39:1e:95:91:64:26:f1:f0:ab:34:ba:19:40:42:0e:2c:
e6:ec:ae:a4:1d:b2:41:8b:63:fb:20:17:33:10:e4:ba:c4:24:
b9:5b:d0:7d:c4:53:78:83:0e:ea:4c:f1:86:4b:12:5e:42:43:
91:98:6a:b9:bc:5d:7b:e0:2e:d3:ee:a9:e1:ce:22:ae:4f:5d:
c7:f5:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:08 2025 by rpki-client