Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: lXooLsJZepweyr3ZNbCucsIl7BTdZ4hyWm8+63vULQQ=
Subject key identifier: 75:56:22:A9:D8:32:CA:C3:E6:3D:66:AD:43:75:2B:0D:C3:4D:8C:EE
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019A71B8A84E388B5A1BAE822B4233DB0CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: 9UdiNxD1xgeCVa6un6vZ0vdSGs9XzesiwYyYvRetizw=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a8:4e:38:8b:5a:1b:ae:82:2b:42:33:db:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=755622a9d832cac3e63d66ad43752b0dc34d8cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:78:b5:cb:af:d9:47:83:69:8b:a1:79:3c:
d7:ba:85:56:47:b3:14:f3:16:b3:fa:c2:a8:bc:48:
ae:42:94:17:56:83:2f:ac:d4:a2:4f:36:d4:88:9d:
08:d6:03:c9:20:ad:e8:4b:bc:e9:28:92:91:df:2a:
0b:f1:ed:16:a3:48:76:13:4a:a3:bb:fe:e0:d6:4d:
e0:7d:76:8c:3f:4d:4e:29:d6:c9:90:fa:93:0d:cf:
59:cb:c7:70:5e:c9:84:0c:26:02:c2:11:24:be:99:
91:c9:ed:22:e8:1b:96:ef:9c:0c:a0:18:79:3a:0a:
5d:33:1c:f6:b9:7d:0f:5b:58:78:1c:74:d6:c7:8f:
f0:5b:cf:88:d5:9f:ce:73:55:03:8a:9e:cc:0d:da:
a4:09:8f:ad:42:35:32:b8:74:45:5a:2c:f6:aa:d0:
48:50:fd:27:fb:4f:0c:b6:95:fe:2d:0e:33:a9:64:
91:a8:69:95:d6:a2:f4:e0:65:24:0b:34:2b:46:75:
1e:ba:73:9f:0f:8e:93:5d:03:95:14:d1:2d:e4:b6:
cb:26:8e:9e:00:43:39:6a:1d:e4:a3:a9:81:85:46:
f9:08:48:35:7e:93:96:cc:3f:0b:45:76:73:dc:36:
7c:eb:7f:c4:08:7a:c1:2c:8a:9b:d9:52:3c:4b:d2:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:22:A9:D8:32:CA:C3:E6:3D:66:AD:43:75:2B:0D:C3:4D:8C:EE
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:f9:fa:4d:e6:c8:16:e3:fc:05:73:bc:78:57:3c:82:ad:
5c:fe:97:d4:5e:11:4d:1e:d4:7a:7e:0a:1a:66:83:49:77:a6:
34:0b:ce:61:07:79:df:82:76:71:8b:45:21:c4:38:f0:ce:07:
e8:27:9b:0c:c7:47:72:cf:bb:92:dd:c8:8d:8b:cb:eb:2e:98:
f4:b8:88:92:a8:66:71:bb:b5:c0:bc:36:43:e5:c4:19:f7:c0:
39:81:1e:b0:4d:f5:b1:04:50:e5:75:5f:08:a4:38:cf:50:d6:
29:c3:26:cb:b0:09:db:e3:bf:4a:a8:29:53:b8:bb:55:27:d9:
3e:da:f4:ea:28:6e:b1:3e:f0:48:bb:cf:8e:c4:cd:63:f5:da:
39:0b:a0:9c:63:8c:9e:ac:b5:28:00:ce:65:ce:a6:d0:61:8f:
e6:d8:74:1f:3f:78:03:e0:52:42:3b:f9:4b:bd:c4:45:d1:21:
6f:95:09:f4:9a:dd:ae:98:a3:96:41:bf:ae:77:14:d6:a5:ae:
37:03:e8:9a:20:f2:99:6a:76:18:39:d2:ea:e8:fd:5d:2d:3f:
7a:a8:50:cb:9c:84:cd:7d:c8:85:85:60:30:ca:a4:87:cc:a5:
20:c2:cf:da:95:b9:a5:e5:6a:49:3e:ac:d9:f3:61:b7:54:bb:
76:07:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:58 2025 by rpki-client