Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: bQ5LdWnXqPXUanCpWS5OKVHZyCrBphwDa9aZLVIog9I=
Subject key identifier: 82:80:26:BE:E7:B7:C4:7C:76:D6:05:3D:35:16:E6:6D:48:E0:FF:A6
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 019A706DF5E8ADE1E0DAAEF74FD891E780DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 121C
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: c/5k7DCcRjImKzRXpkcNVDhMPyPLJv++i6fG4OJ2ayQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f5:e8:ad:e1:e0:da:ae:f7:4f:d8:91:e7:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=828026bee7b7c47c76d6053d3516e66d48e0ffa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:44:eb:a7:5e:52:9a:87:64:bd:ca:31:c4:
f5:80:33:d1:b8:5a:da:69:ff:cd:80:79:bf:58:63:
9c:c3:2e:87:06:9e:1d:f1:49:22:cd:a2:92:79:55:
d0:26:62:9c:d8:73:2a:bb:d7:1a:24:06:63:1d:37:
39:ce:26:c4:88:e9:5e:e1:c5:a6:1c:62:a1:e7:eb:
3e:1e:6c:00:ac:61:af:1c:4a:2d:78:47:9f:c3:ea:
90:e4:01:d2:b5:5a:88:70:62:a4:21:93:7d:1c:83:
de:fb:08:2a:c8:35:5d:fd:dc:04:4b:19:d3:f1:5a:
9e:6e:99:3b:cb:ca:96:c1:a0:a6:4b:de:47:0d:5a:
4e:bd:13:72:f2:f7:d2:c4:06:7e:59:6d:9e:25:b5:
db:4e:5b:ee:af:a9:e8:75:38:43:2c:fa:e8:80:a7:
d7:26:68:f4:0c:90:f9:1e:3a:07:a6:34:90:f3:9e:
de:1f:c3:9a:c0:e6:af:3e:11:20:04:82:a8:04:d0:
2e:73:bd:5a:53:31:4b:2f:5b:2e:9c:61:5b:22:07:
5b:21:d9:82:97:1f:54:cd:22:f9:a7:2d:f6:da:45:
ad:4c:48:9e:ae:e5:7d:a3:33:8c:6b:64:69:5e:9e:
3e:ef:1b:2c:2f:f4:86:9b:c0:12:7c:63:6e:90:22:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:80:26:BE:E7:B7:C4:7C:76:D6:05:3D:35:16:E6:6D:48:E0:FF:A6
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3a:6d:d7:4a:75:14:27:2f:e1:20:c0:e7:e9:56:1d:27:4f:
7d:5e:d8:4f:57:7f:f8:ce:9e:c6:7a:c8:c2:7d:01:23:a3:1d:
14:7e:b5:f7:71:7b:ba:58:8b:48:c9:7b:a5:18:7a:a4:24:91:
9b:e1:9f:a6:68:2a:1c:67:ef:20:7a:8a:24:93:56:78:b9:84:
e8:07:a8:0e:2d:50:8b:8e:31:3f:45:88:c5:80:d7:20:ce:60:
82:c2:fe:05:44:2f:63:fd:8d:01:fa:40:33:f7:c1:62:4b:44:
0d:06:25:bd:86:13:b9:3c:e1:83:2c:98:1b:10:b2:e3:60:15:
70:c3:33:5d:de:d6:de:81:8c:95:5b:ec:3d:8d:8f:1e:96:57:
40:3e:e4:25:d4:86:6a:5f:2f:a4:66:b7:6c:d3:8e:35:a8:dd:
f6:9f:51:c1:34:28:03:da:5e:9d:c2:ae:03:df:60:71:ba:52:
e6:98:b7:4e:13:47:a9:75:14:cf:93:21:e8:d3:17:53:cc:3e:
76:95:0d:f5:66:90:fd:84:58:26:b3:c4:74:a2:a6:2f:e2:94:
a2:bc:d1:7b:87:b9:d4:80:b5:4e:a6:e6:f3:7d:e1:cc:1d:5b:
9c:3f:b4:cf:b1:2a:a2:e4:5c:f0:0f:e4:08:1e:eb:04:b3:55:
a5:5e:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client