Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: IraJu24e7PK+TDEukK26YHqx2+W7e41zd6gLBbbyQN4=
Subject key identifier: 19:98:CA:EC:E4:BA:C2:A3:AF:FE:4C:53:15:E9:7F:51:7B:B5:C7:AC
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 019A73A62905037D42225B233BEEE566C1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 16:01:00 +0000
Manifest this update: Tue 11 Nov 2025 16:01:00 +0000
Manifest next update: Wed 12 Nov 2025 16:01:00 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: X1QKvXcUUDhfdnBUsgqQIgnMAeXbG10IpJv1QBaaTXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:29:05:03:7d:42:22:5b:23:3b:ee:e5:66:c1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Nov 11 16:01:00 2025 GMT
Not After : Nov 12 16:01:00 2025 GMT
Subject: CN=1998caece4bac2a3affe4c5315e97f517bb5c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:58:c1:6b:b6:51:df:1e:70:5f:42:17:36:
a6:1a:b3:aa:6e:47:82:c3:a7:aa:03:c6:6f:03:db:
79:59:b2:09:a2:d9:e7:71:6a:db:e0:82:e5:e9:73:
64:3f:cb:d6:d2:d6:ac:e6:1c:51:1e:47:0c:e6:c9:
e1:79:08:92:ad:43:40:09:c9:3a:41:62:bf:3a:0e:
50:ce:1b:78:f8:de:60:8d:e9:31:b0:6e:e7:05:4d:
d6:f3:fb:e9:02:28:f3:2a:89:3e:e7:0f:cf:3c:db:
2f:87:2f:07:f3:42:24:d3:8c:1d:5a:05:9f:91:71:
5b:05:bf:a0:d8:48:3b:b3:ff:f8:65:7e:c3:9d:34:
8d:9f:be:01:2e:22:c1:73:6b:77:85:d5:e4:3b:39:
6e:54:0d:13:0e:6a:76:34:a7:9b:07:68:ff:3f:e9:
ee:fc:a6:cb:c4:45:40:5b:e9:e7:b9:7e:6b:36:45:
4f:1c:c6:9d:cd:54:61:0f:a5:a1:6b:35:73:11:8d:
6e:8a:c3:f0:0a:11:dc:66:ca:5a:53:13:f8:01:69:
f2:41:a1:d3:e3:da:e9:ab:8a:29:bc:48:3b:1b:bb:
1b:60:fc:f9:21:b7:b5:19:74:f0:e0:0d:eb:7c:9e:
13:1f:89:b0:fa:52:fa:2a:79:9f:19:e6:9a:85:aa:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:CA:EC:E4:BA:C2:A3:AF:FE:4C:53:15:E9:7F:51:7B:B5:C7:AC
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:55:06:88:e7:98:a3:6c:50:c9:b9:e0:b8:37:fa:5e:22:
95:69:27:64:81:60:ac:95:18:01:1d:f0:e4:bc:86:3c:67:a7:
a7:0f:cc:c2:9c:bc:ec:ce:a9:9c:e7:f8:6b:e7:32:79:f1:df:
42:60:b4:ca:19:a1:29:3d:a8:ad:ec:79:d1:38:04:2f:47:5f:
7c:c5:d8:6a:4b:ef:2b:8d:d6:fa:80:7c:85:f1:9c:1c:98:c1:
f8:d6:b3:99:53:07:4e:db:7a:df:e8:a4:8e:69:d1:08:58:30:
51:20:27:7a:9f:83:bd:07:0c:9a:c1:86:e0:92:6d:a8:45:34:
48:86:3b:26:7f:e2:e0:b7:82:89:65:5d:3e:49:8d:eb:3d:df:
84:40:11:e7:fe:00:1e:a2:24:75:e2:e7:8b:d3:22:42:01:48:
17:c7:ef:13:bc:34:ad:d6:57:b9:d3:65:8b:e0:4f:7a:9d:b7:
ba:45:b8:d5:ab:18:53:f6:ac:05:16:58:57:34:e6:0e:dd:98:
01:c5:9a:e2:87:33:7e:a4:a6:65:56:31:6e:a0:8c:a3:84:87:
37:63:c3:be:2e:13:93:e7:02:d5:1f:34:31:1e:f1:fa:5c:64:
8b:a8:67:2b:1d:80:9b:3d:00:38:e8:1a:86:98:7f:61:d9:16:
55:22:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:53 2025 by rpki-client