Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: 0XE/yZGwXyhe9jnNzz81rbn7wRZ+kboNsEn+Jpchih4=
Subject key identifier: C1:AF:59:2F:E3:DC:6E:AF:97:A0:4C:18:34:EE:A6:EF:A3:90:7A:48
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019A71B8D934A9ABEAC071B67FD006E0F452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 0435
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: citA1sryGlp2BigPtPSTuGLFIqh1zumt4he/V97GN/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d9:34:a9:ab:ea:c0:71:b6:7f:d0:06:e0:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=c1af592fe3dc6eaf97a04c1834eea6efa3907a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:52:2e:4a:d6:15:ab:c4:23:c4:df:aa:29:
48:b3:88:b7:0d:68:95:58:f4:0f:b2:c8:4a:d2:08:
30:bc:83:ca:2b:40:eb:58:49:71:07:ba:1c:2d:44:
c7:7d:5d:30:c1:d5:05:07:d9:72:88:7d:f9:eb:2a:
1a:22:cd:38:30:2b:0b:b8:d2:00:05:5e:41:0b:57:
00:16:19:d0:f6:d3:1b:c2:d8:34:f7:4f:1b:40:8d:
1e:9a:2b:b1:1e:30:c2:92:39:31:92:f1:ff:bd:1e:
df:f2:70:99:d5:4c:03:a7:bd:4e:71:75:93:b7:eb:
fc:c0:0e:4c:80:a0:8c:8a:99:10:ba:ff:5e:63:3c:
bd:f0:de:42:b5:81:31:d3:7b:80:42:6a:43:f4:c6:
26:8f:77:ca:2c:65:60:78:79:c0:92:68:37:1d:f3:
44:8f:3a:75:ac:14:ab:ef:3a:f9:f6:e0:ef:9d:70:
76:76:4a:38:85:a6:96:c4:ed:d7:11:69:1b:a5:db:
27:46:9c:04:17:cc:aa:58:53:cf:bb:bd:b2:cf:59:
80:d5:30:91:4b:fd:54:6c:4a:c9:7d:dc:5b:60:0c:
da:47:cf:65:54:02:30:8e:40:4c:93:31:2a:52:0b:
74:40:32:5e:7f:02:2f:d1:d9:61:7b:f9:0d:b9:7a:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:59:2F:E3:DC:6E:AF:97:A0:4C:18:34:EE:A6:EF:A3:90:7A:48
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:23:bd:e7:32:13:bb:40:a7:a9:7e:44:99:1f:10:5a:50:
b4:e4:81:b9:0a:77:f6:c9:73:db:fb:57:55:b8:36:74:d5:59:
65:06:68:a4:fe:d4:48:25:ec:7c:83:64:e6:c9:0e:18:11:a1:
a1:f3:fb:3a:0b:0b:ff:a2:4f:d9:66:a2:3b:e3:5b:02:ff:c3:
bc:8f:9d:88:4e:c6:f3:3c:ac:3d:6f:ed:ea:3a:fb:3e:2b:2f:
5e:eb:1f:ef:83:09:07:f1:24:e1:e7:4f:2a:66:1b:0c:14:01:
b2:45:96:c8:a3:e9:13:0b:9b:f2:d8:dd:3b:f8:56:2f:d5:eb:
fc:9b:05:e5:89:2f:6b:3f:02:38:26:28:b6:cc:bd:e6:e9:6e:
a8:11:39:c2:4f:5a:e7:02:83:72:5f:bf:85:cd:6a:35:62:9d:
e9:f0:ec:d6:0d:11:8b:71:9c:dd:e8:b3:e8:8f:35:33:78:4f:
10:87:a1:c9:ab:ff:0c:fa:f1:91:98:24:54:69:1b:6d:a4:30:
24:05:14:fa:3d:9c:a1:f1:2d:05:f1:19:ed:a7:61:2f:fd:a4:
e0:46:f9:82:7f:54:ce:33:30:de:13:64:99:73:07:0e:0a:ee:
2b:0c:fd:7f:24:39:21:22:49:72:23:11:05:0c:01:c3:39:f9:
9c:83:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:20 2025 by rpki-client