Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: gn90ckYecmMqhycZm4gbdKmLNqWuzKPcTH8HqMAleu8=
Subject key identifier: 1D:4F:37:B4:65:28:83:EA:AA:F7:B9:2D:82:5B:2D:46:6A:FA:8E:16
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 019A3B36CA6E4A4423CE9EBF3382DBF4E042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 0309
Signing time: Fri 31 Oct 2025 17:00:37 +0000
Manifest this update: Fri 31 Oct 2025 17:00:37 +0000
Manifest next update: Sat 01 Nov 2025 17:00:37 +0000
Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: 22w5i10PHE/uisjbxvE4pftj1yzGzFc2Sctc9VduWtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:36:ca:6e:4a:44:23:ce:9e:bf:33:82:db:f4:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: Oct 31 17:00:37 2025 GMT
Not After : Nov 1 17:00:37 2025 GMT
Subject: CN=1d4f37b4652883eaaaf7b92d825b2d466afa8e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:f5:18:bc:75:ed:24:cf:d3:36:83:0d:45:
68:a8:90:c3:e3:d5:35:e5:ca:04:b7:e1:fe:8a:96:
dc:fe:dc:81:ee:a0:61:06:27:77:38:de:8f:4b:a8:
b7:fa:7a:b5:69:1a:74:9d:3a:d0:af:0a:f1:2d:db:
5c:da:2b:b0:27:49:5e:21:15:54:75:06:4e:ab:6c:
79:4e:01:22:9a:87:2e:c0:67:a9:44:e7:69:c8:f5:
ac:e5:ba:ff:f1:d0:7f:ca:a8:6f:90:54:e3:73:cb:
f5:23:d4:fa:bc:1f:81:68:02:f2:55:b3:54:76:c7:
86:77:27:a6:21:c0:e8:f4:b5:7f:f8:08:10:f0:09:
25:ca:3e:6b:06:95:4a:cf:d2:45:69:3c:ff:7f:4e:
6d:df:d7:91:25:03:e5:ce:94:5d:0b:cb:ba:9b:65:
be:ef:6c:a3:fa:87:fe:9c:fa:04:8f:db:25:d8:47:
72:23:84:40:63:e8:00:07:85:f9:a3:43:23:bb:63:
76:a8:42:0f:17:2f:cc:91:f4:ea:a4:3b:81:ac:8b:
55:ea:1c:62:a0:cc:61:1d:87:3c:1f:2b:cf:ae:47:
e8:07:87:52:3c:2c:01:af:1a:75:b4:0d:e3:1f:3b:
10:f6:08:2b:24:58:01:8a:96:25:05:cf:72:9a:d2:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:37:B4:65:28:83:EA:AA:F7:B9:2D:82:5B:2D:46:6A:FA:8E:16
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d8:82:7f:5f:9c:b5:4c:b7:33:2f:ce:09:58:2f:91:50:66:
c4:da:5d:f7:76:70:a6:d1:e7:22:3c:bb:40:68:c8:9b:49:52:
1f:4b:70:03:35:ee:a0:0d:18:56:d3:53:2b:c3:51:4f:d0:62:
cd:57:b4:57:f0:92:3c:26:b0:47:8a:63:a8:bb:a1:40:4f:f0:
dd:ce:cc:f1:04:36:89:94:ad:3b:2c:75:68:d3:69:e9:80:20:
3a:ee:91:72:9d:50:c6:86:69:19:32:86:3e:9d:78:df:e8:fb:
6a:69:cb:c9:8f:53:f6:93:53:db:ac:4e:19:b6:83:db:59:95:
17:d4:9d:3f:1b:8c:37:d8:a0:d3:50:cd:5f:7a:b1:ff:1a:99:
ec:ce:5c:7b:41:d7:1e:64:93:98:ed:b3:cb:38:13:46:ab:07:
39:f2:24:cf:24:7f:09:af:83:69:0b:49:93:84:6e:92:7e:fb:
29:42:65:23:7c:f2:7c:5f:65:63:db:6d:89:11:6a:6f:e5:4b:
09:03:5c:d3:02:d9:97:c2:3e:db:e1:ac:db:a0:0d:bb:8e:04:
0d:11:76:df:45:2a:0b:cc:27:98:3b:d0:f6:57:81:06:cc:75:
25:2a:75:f5:30:b9:67:2e:f6:f8:57:b3:d6:1e:fc:9e:06:8b:
7f:b2:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 03:01:23 2025 by rpki-client