Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: BsZcwDu08FUXjo5M0wuJqLSqU4P8+IUDmD+z2d25b5w=
Subject key identifier: E8:E4:0C:E6:43:D2:98:45:09:2D:53:CA:7C:03:4C:7A:B9:50:16:58
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019A72CA9CE4597BCFDDFB3E0EAC21B97E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:12 +0000
Manifest this update: Tue 11 Nov 2025 12:01:12 +0000
Manifest next update: Wed 12 Nov 2025 12:01:12 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: y0c+fV+eLOBQ6U095qUbfSRM1OmfUbkxzmDxi8eTxBk=)
2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9c:e4:59:7b:cf:dd:fb:3e:0e:ac:21:b9:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Nov 11 12:01:12 2025 GMT
Not After : Nov 12 12:01:12 2025 GMT
Subject: CN=e8e40ce643d29845092d53ca7c034c7ab9501658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:e8:9c:5b:c3:5a:9a:81:24:bd:78:e1:e8:
94:30:7b:3f:93:ad:eb:7a:36:22:61:e3:5e:32:f1:
41:cf:d1:df:75:e7:ee:fe:63:65:b7:91:a4:cb:f7:
d7:e1:46:b9:48:dd:14:5c:04:e6:c9:5e:0a:6c:e6:
8a:b2:43:32:7e:9f:5d:dc:6d:fa:88:5d:fb:28:d2:
c9:23:6d:5f:39:2e:6c:cd:e9:d7:a3:53:98:ac:3a:
70:47:f8:28:f2:86:16:11:7f:8f:a1:06:f1:99:ae:
98:3d:5f:96:6a:be:6a:7a:10:2b:ad:78:bf:d2:40:
6c:a5:67:f7:ea:da:e7:db:c2:db:a4:fd:c1:cf:78:
a3:f3:05:7d:a0:e0:a5:53:0d:c1:2d:4c:13:fc:f5:
d9:87:70:cb:75:6b:09:1a:b3:71:ee:26:29:0a:fc:
14:95:48:c4:67:b6:af:86:46:43:7d:cc:f6:ee:de:
a1:fc:f7:49:59:a3:c4:39:88:7f:d9:bd:2e:66:d6:
0e:e9:c8:73:64:6e:e7:b0:f6:6c:33:90:b6:34:9f:
e6:87:cb:0a:f5:ec:2d:1b:c2:b7:a1:7a:94:61:a7:
e6:fd:fe:66:bc:ee:a5:ca:5f:e9:9f:9f:fe:3a:99:
72:f5:53:29:e9:fb:52:ed:9f:5b:30:26:49:6a:00:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:0C:E6:43:D2:98:45:09:2D:53:CA:7C:03:4C:7A:B9:50:16:58
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c3:11:84:e9:82:9a:b7:19:54:0c:ff:49:80:1f:8d:1c:36:
8e:73:cc:e6:5a:c5:50:2c:7d:c7:6f:f3:d9:a5:4d:47:eb:ba:
fe:82:6e:2c:be:6f:d2:42:f7:0f:07:a4:04:c7:f7:c3:c4:2e:
b6:04:4f:57:a7:8a:11:ef:d9:9e:a7:90:b6:86:50:76:27:0e:
e7:0f:43:42:6c:84:a2:ba:04:ff:86:3d:b8:a0:5d:5f:b1:89:
c5:2c:f5:ce:47:b8:c3:d7:85:2b:ec:ce:0f:b9:65:67:1e:90:
6a:34:ad:05:99:54:56:91:b8:34:f9:a7:e6:44:01:0c:eb:58:
e9:2c:51:a5:18:16:31:17:84:1a:c2:a4:9e:ec:0d:9e:b2:e6:
25:ef:9d:a8:04:47:1f:86:ff:5a:4c:f7:ca:b5:ef:9e:9f:5e:
5c:26:bf:67:b1:70:45:d2:06:34:97:a9:a9:9e:36:e5:21:2d:
fa:00:7f:fd:0a:f3:fc:42:26:ea:3c:3e:37:a6:84:ae:09:6d:
5a:6e:1b:47:54:d3:39:29:57:0b:2a:06:c5:d4:31:a7:47:93:
d4:30:b7:45:c6:0f:6e:5a:22:e5:88:45:02:42:e5:9e:ed:d8:
a4:5b:1f:9c:2b:90:e4:60:f7:1c:63:55:80:04:f1:42:9b:14:
18:04:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client