Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: cTel3Rq/qO9fXk2M1zgzRoYvApKA+r0BbizlV47MS6Y=
Subject key identifier: A2:E9:56:09:73:BE:E0:81:31:65:2A:04:B3:E5:B3:AA:70:87:F4:70
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019A71B76FD1C558294E458F28C2FF4AB6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0A01
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: TaFJcYUrq9qOHynVCBJ+T1bPZXW1HMSbEnQNfBHEXSY=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6f:d1:c5:58:29:4e:45:8f:28:c2:ff:4a:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=a2e9560973bee08131652a04b3e5b3aa7087f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:25:dc:32:88:60:0d:50:91:b4:ca:71:61:
b5:65:2e:db:f8:e9:86:a8:a9:d5:0f:c8:36:7a:55:
a1:ce:f6:49:a4:30:49:c3:88:79:59:fc:af:ef:a9:
ca:cd:3f:23:f9:2b:5e:99:b1:de:fd:e1:fa:43:8b:
7d:60:9d:34:7a:2c:35:47:b2:d1:a3:e3:89:9e:dc:
e1:24:8e:28:42:bb:46:75:66:d3:15:c6:42:ad:a8:
2b:66:02:b6:23:23:d5:3a:5c:82:50:a5:4c:1d:43:
c1:18:ec:e1:e6:88:76:8c:c6:4e:74:1b:8d:b4:4b:
63:df:d2:43:8b:4e:66:52:fa:c6:08:57:2f:75:81:
70:70:fb:27:68:7e:00:8f:f1:13:37:c9:2f:6a:38:
b6:27:cd:04:63:b4:54:6d:c4:27:7d:e7:44:65:52:
55:c6:ce:55:cc:82:6f:c8:65:1f:62:76:2f:2b:4a:
60:ec:46:3d:9f:33:6f:0c:7e:2f:8e:53:ac:0e:b9:
ee:56:12:e3:5a:70:53:d0:7d:9b:6a:06:97:c8:92:
1c:2b:a9:82:40:6d:7d:39:fb:9a:e9:a1:a9:f9:f8:
5d:e0:dc:55:5c:64:21:f3:5e:ce:fa:a9:11:a2:57:
c0:b3:c5:4f:7f:c2:f4:ec:11:b0:10:06:5d:88:2f:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:56:09:73:BE:E0:81:31:65:2A:04:B3:E5:B3:AA:70:87:F4:70
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:c0:d2:f2:52:bc:d6:26:1f:66:98:5c:9d:f8:bf:d3:61:
5f:ba:d4:db:d7:08:7f:c0:85:1f:e2:2e:aa:87:e5:7f:4a:cb:
0b:23:a4:d6:e7:91:36:89:f3:1c:b0:ab:cf:84:bb:0f:6e:e2:
9b:88:e6:a1:5c:98:51:6a:82:09:82:db:a6:57:1a:2a:33:64:
b3:f4:2b:0e:7f:11:01:08:1d:24:3f:85:3d:38:fd:3f:34:34:
5e:82:66:27:92:bd:ae:0b:81:e6:18:76:81:ea:95:02:4b:77:
c2:2a:41:5c:8a:05:b9:ca:75:14:42:ba:ac:95:91:69:d0:f8:
d9:10:c6:1a:a3:5d:aa:e8:93:87:c3:d0:c8:4a:b3:7b:2a:dd:
11:98:0c:f0:c7:40:09:b1:1f:3f:6f:c3:ce:40:04:c0:0f:36:
e4:b4:55:d7:4b:9f:1e:34:c6:be:58:5e:19:a3:4f:36:ae:6d:
d1:76:d5:94:d6:d9:9c:98:f9:cb:f0:58:87:2d:87:32:19:6b:
98:57:6c:51:d8:5c:6f:b5:28:9f:20:7c:22:05:4c:fe:9a:f3:
d2:3b:d9:40:33:55:63:b7:51:4e:3c:9c:fa:a9:67:d2:95:98:
08:17:7f:37:4c:0f:9f:6d:c5:c2:66:4e:97:50:3f:2f:84:7c:
33:16:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:31 2025 by rpki-client