Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: Zlq+2PwlkOHmjwkPxXPlLU0rsSPKPMQAD3BB3nll8QY=
Subject key identifier: 44:37:2B:4D:06:95:04:C3:2B:A6:6E:FC:68:E0:6B:A0:DF:4F:E0:DA
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019A729351E63EBF3C9D371C7F814AC12588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 12DA
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: IpQ2yiPEiGEC0GPHqCtso730DWX9+U7xqp1X16+5RdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:51:e6:3e:bf:3c:9d:37:1c:7f:81:4a:c1:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=44372b4d069504c32ba66efc68e06ba0df4fe0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:cd:cf:c0:c3:0d:3c:9a:9e:50:ad:1a:3f:
eb:86:f5:c4:cb:a2:0a:01:00:f1:67:81:c1:29:9e:
ca:58:8d:9a:4f:10:44:ed:92:7f:60:7d:a5:f7:ae:
63:5f:c1:2e:c0:fc:fe:1a:67:b5:34:8f:00:42:c4:
07:00:91:d8:1f:e4:8a:61:54:5d:65:ae:42:8e:ff:
e4:70:02:0e:d3:04:42:a2:bd:09:de:ed:9f:3f:3d:
0c:0f:09:93:68:72:ba:59:3f:14:32:fd:ed:f4:ea:
bc:03:b0:5a:81:b9:a9:5a:ff:56:e1:d4:07:f5:74:
88:0a:7b:a6:86:33:9b:63:92:66:a6:05:bf:d1:2b:
64:3b:76:a6:0d:0e:85:dd:b9:56:a7:a2:a2:2c:ed:
05:77:89:72:35:56:7b:1e:62:1e:d3:49:e0:60:78:
3f:96:20:4c:ac:0a:03:67:6f:0e:3f:59:25:0b:95:
df:a5:80:ce:1f:b8:28:03:a1:4c:c2:13:12:85:d7:
8a:5f:84:d9:e5:26:5e:0c:d2:86:4b:61:28:d0:41:
62:47:4a:30:54:26:3d:36:52:a1:61:c7:d3:ee:e5:
40:84:a9:05:f7:14:49:fd:27:e5:d2:bc:e8:66:eb:
78:d8:d7:2d:1c:d2:9a:60:c6:6d:c1:68:09:ae:bb:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:2B:4D:06:95:04:C3:2B:A6:6E:FC:68:E0:6B:A0:DF:4F:E0:DA
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:06:a7:e3:22:f3:4b:fd:48:90:a0:39:07:87:f2:6e:ce:5c:
27:71:80:56:25:9d:89:5d:ef:95:46:6d:fd:a0:71:20:66:99:
8d:d4:53:e0:6b:9f:95:07:be:93:99:59:9a:48:ef:64:ee:23:
e4:d3:61:82:5d:54:25:e1:4f:5a:b7:c4:cd:a4:4b:5b:99:0b:
aa:18:8f:c7:88:99:42:8f:94:34:84:34:54:2a:95:3c:bc:4c:
97:79:6b:94:20:4f:19:b2:c4:2b:fd:d1:21:4d:6d:a2:f0:33:
df:c4:68:58:0a:a4:91:55:6a:4c:e4:0f:55:51:55:86:06:27:
e7:fe:e4:fd:1d:65:9e:50:6c:d1:3f:fa:3e:e4:d3:45:20:91:
df:1c:cb:af:f6:67:04:1c:92:b4:a7:e8:56:6c:57:9e:6c:e8:
a9:c3:51:32:47:c3:54:a9:f3:e4:40:c6:e2:8c:37:bd:ab:fa:
71:dd:70:39:7c:af:59:a5:15:32:1c:7e:cc:fa:04:4a:b5:c6:
38:89:cf:28:f0:72:5a:7a:d0:8b:df:6a:9b:68:c7:92:eb:06:
66:fd:00:c7:85:71:ba:31:35:9a:19:32:75:4d:87:75:47:8b:
06:cb:93:53:35:6d:73:58:31:42:5d:47:ac:01:00:c6:3c:48:
38:47:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:56 2025 by rpki-client