Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: C92VYVhlOuAGB7CWmYiRv1Vh+/dyIgHktPs/4n83yOc=
Subject key identifier: 40:6B:F7:F6:A2:72:7F:E0:ED:61:CE:45:4D:DC:A8:39:0C:8B:E6:40
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 019A71B906469E39F67B671E0604AD066BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0400
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: APdgG5TVdFyif0Rl5XhWsCLT9baN80UqRyjRO6f2Rgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:06:46:9e:39:f6:7b:67:1e:06:04:ad:06:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=406bf7f6a2727fe0ed61ce454ddca8390c8be640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:1d:aa:c8:7f:1b:f3:5b:68:ef:2c:1e:d1:
f1:f6:d2:11:81:3e:41:aa:1c:be:97:c7:2b:2a:51:
17:40:2a:a3:55:83:97:d5:59:46:a2:51:19:cd:c6:
b7:35:aa:ca:fb:1f:47:a2:98:44:4f:a2:08:8a:0d:
de:25:63:81:5a:ae:51:15:14:3d:96:5a:f1:6b:c3:
25:d0:8d:af:d2:aa:17:61:66:df:55:78:20:bd:ba:
b9:1b:19:1a:1e:3c:1d:e6:8e:f8:5f:8e:30:88:79:
3a:74:ec:a4:d7:fd:9f:94:25:1a:8f:1b:56:c2:18:
87:5e:d3:32:10:83:53:d6:e2:74:aa:71:ce:71:81:
42:a6:dd:5e:62:a2:99:52:9c:d5:73:2b:b0:c6:45:
cc:e6:27:87:34:c7:aa:25:60:a8:6c:e6:30:1d:35:
2e:83:43:1a:d1:c8:b1:ad:9b:2e:19:31:64:cb:84:
dd:39:11:2f:4e:c3:82:f9:16:59:04:39:ce:59:d0:
95:87:5a:78:c7:a5:31:2f:fb:3f:4e:fa:f6:ac:e0:
14:b4:cf:97:da:c8:cb:ef:98:57:c7:e1:38:13:b7:
b4:20:6b:43:fc:44:f9:8c:6f:25:b8:b8:c0:ac:28:
f2:66:94:45:9e:4d:44:6c:b2:de:56:0b:76:12:a7:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:F7:F6:A2:72:7F:E0:ED:61:CE:45:4D:DC:A8:39:0C:8B:E6:40
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:ad:83:93:b0:9c:7a:2a:36:f6:c9:77:58:49:7b:d4:84:
f2:99:b0:55:ee:db:45:ab:f5:e0:af:8f:68:0d:d7:ff:27:ac:
b9:ae:e8:f1:1f:8d:11:d3:fc:3c:d0:b6:f6:45:7a:a3:6c:92:
01:35:1a:e6:5e:ae:4b:a6:65:f8:8b:a4:9c:55:c5:bc:e6:2f:
c6:2e:5f:bc:02:a6:00:98:f3:12:c9:fb:b5:7b:e4:04:2b:a2:
e9:5d:bd:26:11:9a:bb:17:a0:6a:98:a3:21:4c:b5:93:5a:0e:
da:14:37:14:b5:ba:f5:56:40:c1:39:2e:7f:e7:ff:cc:1e:91:
39:41:a7:6d:cb:d7:bf:11:9e:e2:da:46:3e:e6:e3:25:cd:50:
52:96:71:1b:dd:0b:1b:e0:be:4a:c2:9c:0d:a1:63:74:14:27:
a0:d0:86:63:30:c0:ae:69:21:72:25:8b:4e:5f:2f:e6:ff:a7:
9b:b6:41:57:4e:0a:e1:77:ce:5a:3e:e1:71:d1:d4:b7:86:d4:
6f:26:17:38:7d:af:ab:c3:dd:69:d3:1b:f5:80:ea:b9:15:e9:
e7:6e:89:c6:0b:04:ff:61:62:2d:f0:55:1e:0f:c8:84:81:66:
ea:dc:af:61:e3:1f:aa:4c:a3:cf:25:46:75:c0:80:ed:aa:25:
86:7d:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:52 2025 by rpki-client