Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: canusjBMxOy53AJ6yoUgRXrKpX8zSa0rPS4xtvoTcwU=
Subject key identifier: 9F:82:A6:98:A6:E6:B9:95:2E:0D:98:54:B8:80:C5:42:DB:0B:79:1A
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 019A71B914492ABAF313026B57E1E6CBFE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: Hgn8YVn5LoXd4EZFka7aP0iq6IObEwL0Wuy9Dh26ZP0=)
2: x4aksm8H5U_SoWV9w4ojBxWjtSw.roa (hash: DpLDxBcf+XBzD3AIM/0hCbVFFthMKuVEgRBA/YNYRu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:49:2a:ba:f3:13:02:6b:57:e1:e6:cb:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=9f82a698a6e6b9952e0d9854b880c542db0b791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:d7:91:05:bc:3e:db:f1:0a:8b:87:9d:7d:
a0:ee:f3:f2:09:ec:53:a7:55:1e:a3:ae:f5:0c:12:
b8:b6:27:53:b6:66:40:12:0d:86:6d:38:52:4e:a7:
19:de:8a:c0:37:a3:45:8b:d4:42:af:ec:8b:35:a8:
dd:37:8b:4c:2f:dc:dc:23:42:95:0f:39:74:1c:70:
a9:f7:59:5b:a3:70:f9:d8:7e:c9:3f:f9:3a:1b:33:
01:22:45:48:34:77:f1:bb:66:46:80:b2:72:7e:1a:
92:5c:f2:bd:b3:45:e4:97:23:74:89:8f:e5:78:54:
61:ec:6d:e6:49:a4:11:ce:30:32:bb:4d:38:d4:f1:
b1:56:56:33:ae:92:c3:1c:64:77:5d:b1:48:35:97:
64:d5:7a:bb:31:cf:8a:ea:0e:21:65:f0:5b:20:69:
7c:7f:cb:42:71:88:b7:7b:7f:23:f9:4f:57:49:79:
36:8a:98:8d:98:a9:e3:35:9c:d2:3e:96:9f:1c:3b:
7c:02:7a:1a:65:5b:b4:0a:b3:7a:d4:92:8d:7a:7b:
03:d2:4e:b2:17:6d:42:0d:22:8f:a1:47:0e:91:44:
f4:61:98:b3:89:f2:1e:5d:f2:8f:f5:7d:94:4c:69:
86:0d:8d:3c:ed:6a:b8:e0:67:6d:9b:c3:34:76:42:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:A6:98:A6:E6:B9:95:2E:0D:98:54:B8:80:C5:42:DB:0B:79:1A
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:7a:a9:f8:c3:84:6c:5a:ad:71:ed:23:9b:96:b7:03:2c:
63:70:df:df:7f:b0:6e:e1:28:3f:10:88:45:c4:1a:1b:8f:8b:
8c:07:bc:61:79:df:12:09:f4:83:69:9d:0d:74:ab:a9:19:2c:
d3:ba:a7:c2:2f:9c:4f:09:42:d0:35:54:ad:bd:c9:75:d9:c9:
07:9f:1d:ec:d0:31:6f:7d:ad:33:c8:d8:c2:93:73:e7:13:2d:
4c:4c:b8:14:df:2e:a2:f0:e3:aa:18:e5:f5:3a:50:6b:c2:fa:
60:dd:c4:51:50:44:0c:b6:92:8e:18:9a:84:7f:c9:14:b5:6a:
0e:e0:eb:d3:52:86:df:b6:cc:27:78:ca:f8:bc:96:84:2e:25:
8c:63:79:75:26:5d:21:e5:a8:7e:4c:5b:87:a9:86:f3:5c:a1:
d4:5d:23:f2:6e:78:3b:d6:e1:61:80:ae:ad:72:c8:13:ad:f8:
fa:a3:bc:36:1a:09:63:d7:a5:df:7b:2a:24:54:b3:f0:c6:bf:
1b:40:78:08:3c:1e:5d:90:9d:33:ae:f7:75:95:ab:23:0b:38:
01:50:75:72:48:3b:6d:03:33:de:1d:69:68:b5:61:81:28:d3:
91:66:d4:90:b9:f2:5a:26:eb:86:97:89:d2:0e:d2:1e:06:cc:
bc:83:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:07 2025 by rpki-client