Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json)
Hash identifier: f/hoNrdT3BrBKXSFJMX8TZM6OREZPSFL1EhArrXd23Q=
Subject key identifier: 80:BB:97:4D:0C:1A:DA:16:09:10:2B:7F:DD:4D:CC:83:96:CE:BA:34
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 019A71B826793CF67A454BDA727C007793F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
Manifest number: 1701
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: g8KZXesx8gCuSx+Ywp8S9UfDF+JR0v5pYD3AagbCQUg=)
2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:26:79:3c:f6:7a:45:4b:da:72:7c:00:77:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=80bb974d0c1ada1609102b7fdd4dcc8396ceba34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:be:e2:62:2a:55:af:08:f7:ab:b0:33:e0:
a0:08:3e:a7:88:2f:74:e8:b4:88:fb:b6:f3:91:56:
29:b9:be:ae:42:5a:df:f1:f9:f1:f5:26:5a:d5:bb:
65:87:7c:39:0b:3b:a2:f9:c4:31:67:e8:9d:c0:aa:
f1:7d:17:4d:c8:72:f4:12:5c:ac:22:ca:7d:79:37:
e0:f2:d0:b4:9d:46:9e:f3:c0:cc:64:ff:e8:ae:54:
68:0d:98:6a:a8:81:a8:5a:17:3b:ca:41:c0:80:71:
67:7c:23:01:b9:c0:d4:9f:e0:15:50:f8:7a:43:74:
f2:dc:84:91:65:94:7f:4f:65:34:12:a6:65:ce:50:
13:97:53:78:11:cf:9d:3c:7e:c3:5d:03:fa:44:4e:
65:24:81:74:df:b6:ac:02:97:4b:eb:50:b4:fe:73:
80:93:ab:8a:57:c6:39:77:7a:4f:d5:d1:e3:c1:de:
e0:15:01:a1:bf:ba:6a:f7:8d:0c:96:3e:8f:b7:20:
22:0b:45:b5:44:58:af:58:30:84:cb:bc:78:10:bd:
f4:2e:49:5a:ff:e4:1b:70:16:0d:8b:49:e4:43:44:
24:ef:8b:d4:8d:90:49:73:cd:95:fd:60:3c:db:f0:
46:85:4d:d0:bc:42:38:5d:9f:c5:65:f1:b6:73:91:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:97:4D:0C:1A:DA:16:09:10:2B:7F:DD:4D:CC:83:96:CE:BA:34
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:90:cb:ea:67:c2:72:b6:0d:39:17:b1:db:dd:ac:cd:1a:7c:
c5:24:8b:36:bf:b4:0b:ff:ea:68:73:e3:4d:49:7b:f6:d6:f3:
4d:cf:ae:e8:ac:9b:47:e5:60:39:7d:af:b8:fe:f3:41:82:53:
0b:f7:97:46:99:bf:be:1b:c6:3f:7a:c2:0c:92:f8:08:e4:6d:
a3:ef:f8:d8:f1:a4:97:0c:fe:98:67:ea:4d:f9:ce:bc:40:f9:
32:76:42:82:89:c2:ea:6e:93:17:08:e3:5f:39:5c:db:fe:99:
17:18:ae:31:06:95:86:9c:c4:25:65:cb:48:7a:3f:42:81:96:
bc:60:8a:70:77:fe:c1:d4:d6:57:08:4b:f0:b0:00:da:54:b7:
23:20:ca:8d:c2:bc:29:cc:33:71:07:f5:44:bd:e6:ca:4d:d8:
c8:43:ba:d9:05:03:13:9b:3b:e1:af:ad:d2:f1:9e:a1:6e:f2:
e1:ac:60:2e:0d:6b:80:8c:a3:e7:63:ad:23:ab:e5:e5:19:e0:
2f:78:73:a5:59:72:2b:df:21:c4:14:6f:5d:85:2e:06:71:e3:
1d:56:da:11:b9:28:fe:cd:a9:6c:56:f2:6e:46:d2:2f:8a:27:
e1:c3:ed:29:b7:af:a0:a4:1a:5b:c2:e4:0b:b7:5e:ef:bd:d1:
bf:c5:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client