
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: 0LFxAgrcH4L4yXES5SWiQkV49/9VbbMA3bBrwSyN56k=
Subject key identifier: 39:63:2D:E0:2E:11:EE:B9:9C:03:FA:AE:AF:CD:64:08:DF:BF:CD:4A
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019A730176C4357C6EEBF944CC9C7F77C1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 01B2
Signing time: Tue 11 Nov 2025 13:01:07 +0000
Manifest this update: Tue 11 Nov 2025 13:01:07 +0000
Manifest next update: Wed 12 Nov 2025 13:01:07 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: 0WDRwklf4qePBCxq6Lq+3z4SuJE9HO3XPqdsWS7xO4A=)
2: uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa (hash: q/g5oVhV8oJmXJeCRjYEShHLH12PHyzIo7YhSAchvwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:76:c4:35:7c:6e:eb:f9:44:cc:9c:7f:77:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Nov 11 13:01:07 2025 GMT
Not After : Nov 12 13:01:07 2025 GMT
Subject: CN=39632de02e11eeb99c03faaeafcd6408dfbfcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:5c:5b:ad:4b:b2:09:48:84:b7:9d:e4:8e:
3e:46:0c:c1:d2:a4:8b:91:46:91:94:0e:75:57:73:
0b:d6:64:63:28:16:25:48:11:ee:95:ad:3e:f7:2e:
de:03:29:ef:99:d4:29:f5:8c:7b:d6:46:e6:a2:b6:
72:e0:0e:c1:d6:3b:15:05:39:e7:28:fb:ca:90:84:
e6:d8:f6:a9:e7:37:a9:e4:9a:c7:14:68:d1:24:cc:
ee:e7:85:a9:ac:33:aa:d9:6f:a0:b3:38:6a:86:9d:
c0:da:46:e9:56:30:40:e1:6a:64:b5:13:3b:b6:84:
40:8c:31:5b:ea:ca:42:7a:2a:b7:37:c8:a6:43:9c:
de:af:8a:e7:16:09:62:03:b1:64:57:6c:00:a1:e3:
83:91:2f:94:9e:e2:8f:bf:3b:d1:d1:95:e4:9f:9f:
a2:d8:d9:20:a6:97:31:37:c5:16:f5:3a:c9:d9:bc:
a0:4d:58:c3:cf:c7:a3:2f:90:8b:9e:cc:3c:4c:ca:
26:4b:0f:aa:d8:c2:57:df:fd:f1:3d:a8:31:5d:9f:
7e:4c:72:c7:e5:6c:5b:b3:c5:62:d0:65:68:af:7b:
cf:2e:4f:a9:f4:f0:ec:9a:85:8d:61:86:78:68:ac:
d2:85:8e:e7:ea:39:7a:89:c9:f9:f0:21:03:63:e0:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:2D:E0:2E:11:EE:B9:9C:03:FA:AE:AF:CD:64:08:DF:BF:CD:4A
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:38:58:f7:02:2a:00:0c:42:2f:56:8d:4f:24:ec:1e:2b:1d:
8e:0a:4b:e1:6c:35:fe:57:c2:14:48:78:e2:f9:14:d0:db:80:
12:2d:7e:44:3a:e0:4a:ca:28:a3:68:7c:9c:b4:ab:26:5a:54:
d2:cf:e4:bc:f1:47:9f:28:a5:8f:48:19:09:e4:a0:44:c3:a1:
8b:67:90:5f:d5:d2:8f:e4:47:67:50:12:e1:75:73:e0:87:4d:
86:14:a1:59:5f:ad:ea:10:39:c3:ed:d8:ca:73:21:57:9b:d5:
68:dd:0d:1b:61:4c:c4:32:a8:24:ba:80:9c:04:8f:f8:04:ed:
5f:7e:82:a4:60:fb:85:c8:e0:f0:c4:ee:be:cd:ea:e2:df:bd:
84:51:82:a4:eb:25:6a:0b:07:e5:ec:b1:6c:a9:89:f0:cb:46:
db:7e:a5:dd:59:a9:4f:07:c2:32:56:31:80:fd:bc:1f:54:c8:
ec:45:da:ad:3b:74:e7:74:a3:dd:51:63:ac:e7:30:35:09:58:
1a:9e:60:24:db:08:d2:94:eb:f5:0b:de:f1:2b:55:86:95:3c:
6a:e5:05:b1:5a:ee:85:ad:c8:04:12:14:e6:4b:05:ff:b4:74:
11:f5:7c:92:b6:d0:7e:28:e5:3f:61:8d:41:5f:7d:0d:91:19:
a9:9a:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:48 2025 by rpki-client