Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: B7PSAYLh5co4U9kg1PDK6kZLRj12a9wYw/leZv9tMUQ=
Subject key identifier: D4:D8:08:A5:17:41:7A:37:30:9B:8A:CB:0C:0F:FE:CE:AF:E8:65:14
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019A71EE8D2E6812DA3A274B8E5E1BBFFEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0DCB
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: amY6iRBPYWLq3DAyVfrQ0+EdnEeklomyT13M//X9mBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8d:2e:68:12:da:3a:27:4b:8e:5e:1b:bf:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=d4d808a517417a37309b8acb0c0ffeceafe86514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:94:c4:3b:f0:94:46:19:57:5c:f7:f7:b8:
ad:c7:a8:69:51:79:e1:45:e9:cb:89:6d:57:b4:79:
45:4f:f4:eb:64:0f:0d:85:31:bb:65:91:c4:df:4f:
97:61:96:02:12:8d:d5:c4:c4:9c:d4:d3:0d:cb:34:
ef:9e:fa:e9:04:4c:f3:63:29:4c:99:88:44:71:c3:
9c:6c:31:e9:4b:80:9b:87:5d:ca:c6:b8:14:62:0d:
2c:9a:fb:c7:cd:02:60:4e:da:b2:a1:da:82:b5:c7:
e1:8e:36:41:f8:92:bb:39:ba:2f:54:55:17:6d:03:
3e:ce:67:ec:2a:da:2e:7f:bb:60:7b:74:f3:58:c5:
83:b6:88:87:1b:27:1b:15:d7:c7:20:98:1f:c4:7e:
e1:b9:e6:cd:a3:a5:bb:d6:f6:97:3e:63:a3:4b:f4:
73:f4:ce:1c:19:87:17:70:63:73:70:81:06:03:04:
eb:3c:3e:11:63:f0:4f:e7:a4:36:3c:66:f5:90:bc:
54:6e:0f:27:83:55:62:b2:23:37:89:99:97:ae:7b:
24:bf:a0:0f:ec:1f:26:a1:97:00:5f:47:07:68:bd:
cb:dd:08:b3:76:67:f6:99:7b:a0:4e:7b:c0:02:db:
ea:bc:40:c1:37:be:f6:a1:ea:8b:9b:0d:b6:9c:d4:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:08:A5:17:41:7A:37:30:9B:8A:CB:0C:0F:FE:CE:AF:E8:65:14
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9b:26:49:eb:1a:90:ed:ab:cf:7b:89:91:7b:9c:36:e0:7c:
be:20:cb:a8:14:e5:9b:47:ea:b3:74:de:26:2d:7b:08:a0:34:
42:92:ba:46:70:c7:8b:68:33:65:db:67:ee:64:ab:81:06:57:
41:e5:bc:ee:27:83:6c:11:88:39:e2:5d:ac:44:d6:75:92:1d:
0c:28:d8:a7:90:c4:d2:35:d3:e4:88:4d:63:14:27:8f:cb:fe:
4d:fd:f7:83:30:92:fc:b8:9e:77:09:79:1f:6f:6b:d1:2c:0e:
79:fb:76:5d:4f:d7:22:4e:39:38:d1:eb:92:ce:94:41:4b:43:
34:28:6c:19:13:b5:8c:a5:63:45:ea:09:db:19:e4:ff:13:cd:
f4:97:51:b9:af:d1:67:d3:14:2a:9d:19:6b:11:f3:fe:84:70:
d9:00:ea:d5:7a:c9:57:72:95:15:ae:9f:82:da:05:bb:3e:b4:
e0:04:d5:92:63:64:a3:fc:89:bd:50:19:1e:13:c7:3e:41:04:
f6:b9:f3:13:2d:64:3f:50:6a:d1:64:09:99:c5:61:ee:71:d6:
9d:34:18:e2:a0:89:26:85:e0:53:98:ed:11:5c:c4:aa:e8:3f:
1f:8e:ec:a7:be:8c:31:5f:f7:73:dc:f2:0a:87:c8:de:42:a2:
6d:a8:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:56 2025 by rpki-client