Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: nHL3QClMyCEmAeFecyp4Cljmhz9f3Fz2Q13lWLsrzGc=
Subject key identifier: 67:35:24:D0:EE:A7:86:6A:FB:50:AF:A1:38:F1:F6:4D:B7:F9:8A:D6
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019A4B8544FE388EB315F523EB6F70E3A54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 170C
Signing time: Mon 03 Nov 2025 21:00:16 +0000
Manifest this update: Mon 03 Nov 2025 21:00:16 +0000
Manifest next update: Tue 04 Nov 2025 21:00:16 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: X2Q6D1KujbhfN3tVIihW8uYXS00Hn8BDdkg/T1P2P3Y=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:44:fe:38:8e:b3:15:f5:23:eb:6f:70:e3:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Nov 3 21:00:16 2025 GMT
Not After : Nov 4 21:00:16 2025 GMT
Subject: CN=673524d0eea7866afb50afa138f1f64db7f98ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:ed:6c:d1:2a:c4:85:c5:b7:dd:a0:30:29:
a7:60:f1:3e:e8:1d:62:72:9c:ff:de:7e:c0:97:d1:
46:6d:be:dd:db:6e:ec:9a:e6:ab:54:f0:3f:43:13:
1c:ea:75:9f:58:86:96:1e:9b:ac:76:bf:04:ee:a9:
30:5a:ff:54:6f:7f:4c:4c:e1:f0:86:4c:67:32:35:
b2:2e:16:05:53:f6:7c:52:5a:63:fa:eb:06:b6:c7:
43:56:7f:44:29:d1:9b:1a:ee:f0:dc:eb:b9:36:35:
05:35:c0:10:15:35:7b:e1:f4:8e:5e:a5:0c:78:23:
7c:af:42:43:d0:cc:65:85:6b:e3:b9:b7:c0:04:11:
44:71:dd:71:ad:04:38:4e:66:71:38:18:29:55:23:
0b:73:d4:88:73:ae:ed:3e:06:2b:3e:fb:d0:8d:20:
91:02:f9:78:94:6a:1a:d4:65:01:87:d1:3d:58:15:
6c:e7:79:d2:ca:cd:28:1f:8a:29:46:a6:bc:91:ad:
23:89:5a:07:fc:cd:01:a0:33:90:a5:43:d2:a3:cb:
94:90:d6:b9:a0:3b:2a:de:b3:96:fb:6f:84:31:c0:
47:4c:a9:8f:8c:87:4c:cb:a4:99:68:16:7f:43:1e:
21:ce:23:4e:60:37:ea:73:72:5e:03:c9:82:b3:cd:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:24:D0:EE:A7:86:6A:FB:50:AF:A1:38:F1:F6:4D:B7:F9:8A:D6
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:68:87:a7:3e:b4:79:2e:25:0b:77:75:ad:8f:77:1e:0a:a5:
2c:1b:b4:a1:47:ed:a8:5c:13:89:92:f7:88:e1:2b:0e:3b:10:
29:70:7b:de:a3:d2:3e:c4:0d:87:55:3e:67:fa:8d:79:d7:02:
54:b1:4d:03:96:83:60:4b:82:65:64:94:34:36:78:5b:1d:64:
16:78:8a:46:b5:90:f7:27:ce:6e:64:0c:a5:52:76:4c:b7:ba:
25:6b:86:2d:ee:32:23:f2:d2:7c:84:e9:a5:0f:2b:54:71:ba:
f8:60:d8:9e:2a:c8:d0:48:d1:51:f1:82:c0:d5:c2:c5:66:34:
45:db:b9:00:a7:cf:93:33:66:d0:c2:c1:c2:17:0d:ce:85:7d:
af:b8:6c:29:46:1b:0f:ba:72:04:03:0a:3f:93:52:63:19:9c:
6a:e3:22:f6:28:e1:8e:f4:b8:56:70:c0:f4:a9:11:58:6e:ad:
47:43:9f:36:1c:1b:e6:da:eb:61:fa:c2:c3:9e:63:cf:28:c2:
b6:0c:f2:93:29:2f:ad:a9:c7:44:2b:a9:af:e4:c2:7f:40:30:
ff:20:63:0d:f0:4b:62:3b:9c:a1:28:e1:80:85:13:ad:14:b8:
c3:3b:39:a9:46:31:0d:73:50:95:de:ba:c3:06:30:15:63:be:
f5:4c:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:33:12 2025 by rpki-client