Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: MDLFZTh54IJgyXLAQrBpc7PWYE0hWVL6wf8L//ZZlZc=
Subject key identifier: 75:84:19:78:8D:F9:F1:5F:98:A6:CA:7E:E1:04:AA:BB:2B:A6:3F:A0
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 019A7149EC96DCB50495FBF618EC21DF7B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1431
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: zfG4iqyAIRaHaN3T5tL29JDeLSswqImlSTlDYdNqM6U=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ec:96:dc:b5:04:95:fb:f6:18:ec:21:df:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=758419788df9f15f98a6ca7ee104aabb2ba63fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:d4:b2:1d:d7:29:ae:83:21:84:ee:7a:66:
1f:31:5f:1d:47:bd:a4:ce:cc:66:c6:01:db:ef:06:
93:03:d3:22:17:e1:79:59:33:86:3e:a4:7c:72:16:
a5:a0:a8:78:88:f6:06:c9:45:5d:dd:75:6e:04:a7:
ec:ba:08:6d:91:a4:09:db:f2:73:90:f9:78:2b:a3:
5d:8f:a8:ba:ba:4a:41:d6:ca:5c:fc:01:b0:d3:15:
ae:6e:1c:6f:28:be:c6:1a:e7:c9:63:e2:3b:c9:37:
a2:a2:93:cf:9f:fb:4b:73:ce:7a:7b:a6:c8:1c:fe:
f1:16:e2:ac:90:62:49:e0:d7:b5:c3:18:dd:3a:52:
fd:b5:35:de:13:f5:8f:f5:b9:65:25:06:84:17:d3:
76:15:13:bd:07:28:05:9e:f1:da:c3:76:ab:8d:88:
3b:cd:dc:a3:cf:79:0b:b5:3b:ea:db:7a:a3:b7:c7:
cb:b1:6d:6a:6f:83:08:71:b1:f2:d1:23:e3:f4:ea:
aa:e8:22:f1:c4:ad:2a:50:0b:4b:32:1c:fd:0a:a9:
9e:8f:af:f7:af:0d:61:b4:7e:7c:23:0f:93:61:3f:
06:a7:79:da:d1:b1:53:48:70:b5:f5:d2:35:78:b3:
0e:81:ee:c7:19:87:76:bb:ad:76:9a:fc:05:48:b2:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:19:78:8D:F9:F1:5F:98:A6:CA:7E:E1:04:AA:BB:2B:A6:3F:A0
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:f1:2b:01:cd:46:ad:35:7b:da:3b:10:78:e7:34:62:ea:
ef:1c:3b:0f:2b:56:39:6f:ca:4d:58:92:13:c0:59:a9:be:0c:
ee:52:ba:23:53:90:29:82:a6:e1:81:7e:e5:65:af:6e:73:4c:
1f:b4:5a:1f:36:e4:cb:84:b7:14:12:0c:3e:47:27:f4:27:20:
d8:15:1b:6a:fc:1a:bf:ad:25:09:23:72:ae:65:df:95:7e:93:
10:67:53:58:d3:40:5a:ec:19:4b:5b:2d:d6:39:ee:dc:fd:09:
4d:55:c4:ea:e0:58:df:d9:9b:44:ce:bc:08:4e:30:5c:21:3d:
7f:cd:64:c5:0c:a6:76:9b:4d:3f:78:96:d9:c9:5c:5f:a6:80:
b7:d6:7e:9f:61:e5:b3:5f:5d:fb:83:dc:ca:02:a2:94:4f:c4:
0a:69:48:42:f6:cc:f1:0b:e5:40:9f:c4:58:bc:17:fd:3f:b6:
61:97:df:99:fa:39:93:00:5d:49:b1:f3:b2:9b:69:df:b2:ae:
81:68:24:60:de:a7:1e:23:ea:10:7c:54:2c:1e:0b:33:90:da:
7d:bf:77:4f:27:c9:f0:3e:d9:2f:c8:60:2a:0d:10:41:ac:49:
e3:03:69:83:60:b5:bf:88:51:3d:fb:10:c3:52:98:0e:c0:81:
9b:a4:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:37 2025 by rpki-client