Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: A3xd+eO9AVwjL9Iu25D7XUhzV8EUgAyw603UmViV/dY=
Subject key identifier: A1:34:E7:AA:53:B6:37:1B:31:A7:91:0D:69:5B:0E:E9:EC:A9:74:71
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 019A71B8B9263E3D50F5709008843A64C484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 14FD
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: Kb8feF3QsRSIPnZAKwg0wvm9AmGPyvh2mf8tPH5X/IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b9:26:3e:3d:50:f5:70:90:08:84:3a:64:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=a134e7aa53b6371b31a7910d695b0ee9eca97471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:ef:34:e5:ae:e8:61:99:62:04:71:6c:7e:
f9:02:7c:7b:28:8d:23:bc:01:df:71:a0:66:5e:be:
93:fc:7b:22:ed:ba:b6:bb:20:00:52:b6:3e:72:f1:
0f:9e:b8:80:e7:44:03:8f:b6:0a:6b:3e:6e:05:f9:
d7:c4:6a:a2:1a:98:62:88:51:60:80:d9:d7:11:22:
7c:66:e0:1c:31:99:e9:24:2e:6a:c4:b3:fe:d5:81:
42:79:b2:34:12:14:cd:ba:d7:d4:29:08:af:b5:9e:
64:3e:b4:75:c3:34:4a:a1:b4:f8:ae:8a:da:34:21:
10:38:9c:47:96:02:54:97:f2:17:7e:6f:f0:49:ea:
aa:ef:f3:f2:90:a0:b9:93:69:8a:8f:27:9e:8a:21:
cb:79:78:d3:ac:6c:91:a5:50:72:32:45:bc:f7:1b:
11:ab:10:b0:32:91:b7:5a:73:82:b4:e0:1d:b4:46:
c9:ce:c4:c5:7e:84:84:9a:fb:e0:63:df:6d:49:5f:
75:e4:2a:6c:32:8e:00:7c:98:96:6f:5c:c3:4b:2a:
84:a2:60:82:6c:9a:ef:8b:f8:08:b7:d8:65:f5:cf:
c0:9c:8e:7a:0f:8a:23:0e:f0:2c:00:73:57:25:93:
6c:89:f9:e4:f9:b8:8a:1c:e4:37:e8:19:a5:3a:3c:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:E7:AA:53:B6:37:1B:31:A7:91:0D:69:5B:0E:E9:EC:A9:74:71
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:f7:7c:30:a5:64:25:52:80:79:b4:9a:68:b9:d7:69:be:
2c:d2:73:de:d2:f6:64:a9:d6:41:b4:28:db:7c:01:9e:92:fd:
9e:29:68:bc:2e:f2:e6:a4:d3:f5:01:ac:96:e9:59:43:db:b7:
92:4f:be:1e:10:dd:ba:23:dc:36:94:95:f2:a9:f4:d7:be:f4:
98:08:5a:84:43:97:c9:11:a0:fb:a8:da:d6:f3:fe:f9:0c:9e:
b8:e9:d7:8f:e0:f1:45:fe:60:51:af:70:51:89:43:85:e6:e3:
e2:8c:49:54:49:10:7a:9e:ee:23:b8:1e:15:af:00:74:94:2d:
fb:a1:d0:3e:fe:7b:21:d2:83:13:ae:7d:34:1b:de:c9:5a:12:
52:43:e2:bd:bb:cd:aa:35:da:9c:53:3f:38:6d:ed:59:0b:99:
92:bf:5c:53:01:98:e6:a4:b1:fe:5b:73:8c:17:e2:89:d1:07:
c5:5d:cf:44:b2:79:c5:a3:a9:b4:4a:a1:ed:75:d1:2b:0a:af:
28:be:a0:e7:b8:3f:a1:fd:a6:0e:29:54:5d:c6:37:9c:75:92:
06:32:53:53:d4:b5:58:1f:38:5d:31:45:3c:8c:d2:35:b2:f6:
a0:a8:de:3f:b8:19:14:25:56:c4:05:77:b8:d8:9b:dd:88:b4:
e6:8d:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client