Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File: LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier: 65zwhZUVY8O4XlZhl3HBYRwj36i+b4Nj58XvjfljHhA=
Subject key identifier: 45:79:74:BF:FC:61:AD:94:9B:FD:70:D0:45:A7:EE:99:B7:5F:40:3A
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 019A71EEA4235BB5EF85596E2EA1BDE66D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number: 0ED1
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (hash: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=)
2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: HgaSmBBP2pvFsjKJwVNKpvCunbBYAJsCu2TbOGyZnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a4:23:5b:b5:ef:85:59:6e:2e:a1:bd:e6:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=457974bffc61ad949bfd70d045a7ee99b75f403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:c2:14:2a:c6:5d:25:00:de:5d:52:9a:b8:
a2:79:a4:9a:a6:8d:7b:48:2d:2d:31:bb:42:01:6d:
3e:97:31:cd:ad:20:b9:e8:f1:39:6d:39:94:22:81:
a5:19:39:90:62:e9:1b:17:c7:d3:c2:a9:56:e5:0a:
77:5d:6d:b8:ea:a1:f6:2a:96:fe:94:8c:66:a8:78:
84:b0:5b:13:b0:cb:da:45:28:62:c6:9e:6c:fd:5b:
0e:4e:ab:a7:05:6b:05:36:30:1e:85:a0:b5:5e:a1:
2a:fb:63:7e:5a:da:20:f2:71:31:c4:0a:57:8e:4f:
f4:64:d3:8a:db:69:db:a2:b5:63:80:a2:6c:7c:27:
f9:e2:9d:2a:11:2f:b9:f5:f8:3d:53:51:da:22:c6:
2e:00:b5:1c:31:af:21:3d:7f:a3:3a:18:59:99:dc:
75:76:8b:a6:98:7c:b9:e5:18:03:c3:dc:a2:c2:2a:
3b:6f:f6:91:ae:12:0b:d5:8e:c0:5c:cf:03:f3:4a:
45:05:45:7a:ac:79:d7:61:e6:8e:95:80:27:db:e2:
b0:bb:a3:d2:fd:20:ed:4c:a9:53:a9:9f:e7:6a:ca:
5e:2b:b3:e6:18:f4:cc:56:10:86:25:eb:06:a9:32:
1f:33:f9:f3:18:33:32:01:91:28:99:fc:16:ca:f3:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:79:74:BF:FC:61:AD:94:9B:FD:70:D0:45:A7:EE:99:B7:5F:40:3A
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:a4:3a:49:ba:e8:30:e5:15:51:79:9a:34:38:23:54:53:
14:ea:f2:fe:bd:b9:b8:8e:cc:de:2e:96:8c:de:49:0a:c5:ce:
5b:0b:6e:e5:80:2e:94:16:9a:84:9b:22:c4:f6:62:98:a0:80:
6f:1d:12:94:8e:5e:1f:14:56:ac:fb:bc:17:77:4e:16:66:99:
53:36:3d:95:ce:78:52:8f:d1:d3:aa:8f:f3:94:b8:40:8c:e6:
5f:cc:3b:da:68:24:a7:83:89:f3:85:ea:b4:26:cb:e5:32:81:
f6:b1:34:63:62:e3:c9:58:1d:79:31:7f:24:d7:86:13:65:a0:
1d:61:c0:ec:45:7a:05:5c:d8:03:f5:4a:ea:1c:64:25:33:5f:
94:51:4d:9c:d0:af:84:37:b6:61:b3:82:be:00:77:31:6e:d6:
d7:4c:42:58:8a:00:dc:d4:34:a9:c7:39:4d:02:a6:dc:c7:90:
bc:9d:8e:34:68:9e:9b:af:c3:13:e6:73:bb:95:a9:73:76:b5:
94:9a:d5:6e:22:5f:fc:9c:5b:19:61:7a:2b:63:95:20:48:03:
eb:a1:5a:e4:ca:27:be:d1:6e:c7:a4:3d:6a:a0:6b:f6:08:f5:
49:80:f4:79:5c:c7:fc:db:df:70:44:5d:eb:64:9d:d0:62:79:
46:02:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:18 2025 by rpki-client