Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: Sv6/PSeDVkKuD31fda/vXkHL7DMWhxH64Sm0BiEnvjM=
Subject key identifier: 86:E3:DE:1F:AA:8B:7B:1C:A1:A1:8E:10:4F:58:03:4D:9D:96:82:97
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019A1C1972078F819B33DEE95F80F8981155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 05E9
Signing time: Sat 25 Oct 2025 16:00:20 +0000
Manifest this update: Sat 25 Oct 2025 16:00:20 +0000
Manifest next update: Sun 26 Oct 2025 16:00:20 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: pbymXKzRObCaRieyFCwUiEmTNNsQ8xhxm7Zys8pKFd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:72:07:8f:81:9b:33:de:e9:5f:80:f8:98:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Oct 25 16:00:20 2025 GMT
Not After : Oct 26 16:00:20 2025 GMT
Subject: CN=86e3de1faa8b7b1ca1a18e104f58034d9d968297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:1c:b4:27:7e:5d:34:7d:a3:90:71:7e:f3:
76:90:47:b8:e4:9c:27:3d:4e:1f:63:cc:e8:fe:21:
fc:56:a9:cf:89:98:56:08:d6:4e:36:37:8e:da:e3:
79:10:fb:c3:4c:1a:de:a7:32:6e:5b:e5:62:85:99:
28:b4:08:46:7f:3f:cf:5b:da:b4:d0:d5:cc:60:22:
96:31:95:88:9c:76:52:f4:2a:d9:55:08:eb:cb:d2:
c2:ad:de:7d:27:cf:74:db:20:4a:ff:c9:5c:34:13:
24:eb:15:fc:d4:bf:1b:cb:1b:6d:d7:f7:26:5f:27:
2b:70:12:44:43:7e:62:d1:1b:c9:f3:f8:4d:0a:72:
38:8e:c1:66:dc:2a:23:8e:52:dc:d8:40:1a:dd:1b:
32:44:66:f2:5a:66:9d:7f:ff:14:49:99:94:48:78:
02:aa:ab:a2:13:fd:5d:86:b6:84:e7:aa:1b:44:1c:
08:91:ca:88:bc:03:cf:e7:e6:13:fc:a7:7e:f3:fc:
c8:00:37:a5:55:7f:49:8a:05:a6:4f:4a:a8:59:92:
9a:0b:34:68:55:70:60:d0:97:25:ad:3f:d9:62:42:
8e:e2:b2:7e:a7:94:10:cd:c7:de:2c:1b:e4:d1:79:
ef:a7:94:9a:5d:be:42:fe:7e:e1:cc:d4:80:48:d7:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:DE:1F:AA:8B:7B:1C:A1:A1:8E:10:4F:58:03:4D:9D:96:82:97
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:3e:ab:cb:62:49:6e:b9:3c:e8:af:74:60:b7:7a:63:39:
32:99:e3:e5:4e:42:bb:da:c3:67:7d:7f:dd:52:01:f6:e7:49:
17:0d:db:63:b0:29:46:f5:48:37:24:28:38:0f:14:c4:fc:2b:
d2:a7:ad:b4:62:a4:55:1b:04:74:70:c5:bf:8a:55:0f:ba:4d:
9d:74:36:a6:3c:eb:7b:a6:4e:89:e5:01:ff:54:f5:78:21:ba:
3e:ba:5e:3c:17:90:f9:c0:19:74:64:f7:92:3f:fb:c1:34:90:
a9:ed:81:e8:af:63:2f:14:af:b1:00:2a:cc:28:07:cd:2e:5b:
e5:39:79:e5:2e:f2:d7:b1:20:2b:62:40:77:d4:58:d7:d2:e7:
ad:69:9d:54:ca:70:30:e7:ac:b9:bf:45:6a:ad:1f:e6:50:bb:
1d:6b:2d:68:a0:2b:6a:6a:ca:d0:6e:7c:fe:66:19:7c:5c:69:
62:f7:17:8d:6e:fe:1c:9e:67:6c:41:d2:02:1a:98:ea:88:fc:
90:a3:7c:3c:c3:f2:77:2d:98:a8:15:18:9f:84:17:13:0d:11:
a4:87:09:a4:ca:16:c1:8e:8b:41:b7:0e:49:eb:09:74:81:61:
ff:c1:bd:d3:49:6c:90:39:c4:3d:31:d7:f9:93:2a:e7:f3:1e:
62:f1:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:20:50 2025 by rpki-client