Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: /RgJeJU6pQI5vukJoexVrDtoPAlKIYF447pDfTI1zu0=
Subject key identifier: DA:18:FC:95:8F:53:59:43:99:A6:9F:11:19:21:C2:98:1F:D6:E3:F8
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 019A706E8D1B426D8477D0608C38C24F52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 01:01:24 +0000
Manifest this update: Tue 11 Nov 2025 01:01:24 +0000
Manifest next update: Wed 12 Nov 2025 01:01:24 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: CGcEHplUCpyiqc5szz3oPa7se8SdMmeYDD2SSIqaVzQ=)
2: pb4QZ95Peoa-v89w9IfVF9OInYI.roa (hash: mVmSldgY3RuIKYBpTP9fbMVJ33NM7M6bAyGk/0LxYwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:8d:1b:42:6d:84:77:d0:60:8c:38:c2:4f:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Nov 11 01:01:24 2025 GMT
Not After : Nov 12 01:01:24 2025 GMT
Subject: CN=da18fc958f53594399a69f111921c2981fd6e3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:32:38:fd:dc:49:4b:88:7c:56:13:96:e1:
e7:ff:6b:2b:b9:8f:3c:f6:9d:75:91:1d:42:b1:37:
10:52:2a:b7:25:b0:e0:84:f6:9d:0d:7d:fe:94:34:
1f:fc:f0:22:b1:52:43:d5:a4:41:8b:58:f2:5b:9e:
09:a6:30:88:b6:b5:d8:08:65:8b:f9:06:b0:14:5c:
de:f5:fc:c7:bf:0c:41:0d:72:3c:e7:59:f7:5a:b0:
b3:ba:02:95:70:75:d5:be:70:22:14:4b:76:3c:ac:
92:f8:9b:fa:89:12:d8:36:99:be:6b:58:8d:20:09:
ef:03:0c:a4:bb:f8:18:72:1f:35:a4:d4:f3:f8:5f:
33:17:ed:24:ec:c0:a9:b4:0c:80:03:7e:1a:fd:3d:
6f:aa:05:ec:83:fd:0d:7e:6b:09:16:a7:ae:7d:6a:
df:7c:02:04:34:03:d8:bc:ac:14:89:cd:5c:eb:f2:
db:f1:46:99:28:c2:f7:ef:43:71:9c:77:13:ce:c7:
83:7e:8f:02:e8:e1:37:ec:61:73:4e:eb:44:a0:6c:
63:bb:95:7c:b6:68:1d:6d:4a:72:79:94:d0:0d:2b:
51:59:1d:1a:23:2f:f3:0c:62:86:ee:68:57:6b:d5:
35:68:aa:5f:d0:e8:95:44:3a:66:41:6c:09:4a:d7:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:18:FC:95:8F:53:59:43:99:A6:9F:11:19:21:C2:98:1F:D6:E3:F8
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:13:8d:dc:d7:32:0b:8c:9b:32:47:86:03:bb:49:c7:18:f9:
0b:47:eb:3b:27:2f:a9:4b:a8:32:95:84:be:e1:61:d6:56:ac:
ff:51:bb:31:c7:78:5d:75:fd:2f:51:02:15:c1:45:a2:e3:ee:
23:7b:8f:69:99:2a:26:a0:42:af:20:73:5a:06:e4:5d:8c:f1:
dd:0e:1a:a5:fd:d5:a4:9a:9c:9c:72:bc:00:b7:9f:bb:36:44:
89:80:37:cf:73:97:be:de:5f:79:5e:78:c5:62:b0:77:f6:17:
2d:79:52:8e:88:18:e3:7f:d3:ab:95:e5:1b:58:d7:46:c6:f5:
64:49:ae:69:31:9f:40:cd:4a:6c:f7:c0:f7:c6:88:bf:ff:99:
e6:d6:f5:74:0f:f2:8a:50:1f:bb:cf:d7:e2:5b:2e:65:0c:65:
90:a4:33:46:1a:83:eb:66:0d:ed:73:06:af:be:49:01:cd:14:
57:81:fe:55:61:39:1f:a5:cf:f2:dc:6a:cb:e4:f2:27:5a:16:
a2:6f:86:16:c9:2f:60:ae:4e:d1:73:24:aa:0e:65:ff:8b:43:
5c:c4:5a:bf:86:f0:88:6e:e3:11:17:2f:22:a9:01:f2:c1:fe:
b5:92:03:52:94:35:8b:8d:b5:0b:11:40:18:42:f8:0e:80:45:
b4:4f:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:41 2025 by rpki-client