Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: dvNRdMghLGP7GG0DW2xxT8r8YXbNPAQAPq/vwC29Iwo=
Subject key identifier: F7:A6:08:14:85:79:E4:74:DB:1B:A1:E3:16:84:4F:F2:70:82:7E:8B
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019A2FD6EBFA5057DB17F3C5A018CDB55795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 13D7
Signing time: Wed 29 Oct 2025 12:00:05 +0000
Manifest this update: Wed 29 Oct 2025 12:00:05 +0000
Manifest next update: Thu 30 Oct 2025 12:00:05 +0000
Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=)
3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: sxwoWcVYnlTKTN/d/3gIxyQcVQYLopWmtyB5j/iMG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:d6:eb:fa:50:57:db:17:f3:c5:a0:18:cd:b5:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Oct 29 12:00:05 2025 GMT
Not After : Oct 30 12:00:05 2025 GMT
Subject: CN=f7a608148579e474db1ba1e316844ff270827e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:dd:5f:40:a8:fe:05:6f:25:30:fd:21:aa:
df:07:4a:c3:57:a9:40:67:96:4a:30:ba:7c:64:2f:
93:b4:2b:52:bc:ed:af:4e:c5:b1:7f:7a:dd:c6:f9:
83:8d:4e:e2:72:b0:74:0f:88:26:24:16:b8:79:6c:
42:ac:66:3a:53:c8:be:e2:18:b8:7f:d0:ed:25:6e:
ff:c3:7c:1c:8a:3b:2f:9a:f0:9d:72:86:b7:9a:b0:
57:86:02:2f:a7:7a:03:36:0c:ba:17:e5:4a:49:79:
87:11:fb:54:bf:07:0e:dc:50:72:61:92:45:d2:3a:
14:a8:b1:5c:db:25:db:54:9a:72:92:f2:63:b3:a4:
3f:69:a9:ba:e1:5b:60:ef:5d:14:0b:0d:76:7d:d4:
43:77:29:cc:bf:66:69:b7:76:64:34:a8:c6:0c:08:
3a:af:ae:9a:ea:78:85:6f:5b:7e:d6:b7:4e:c6:07:
07:df:1d:16:6f:12:17:58:5d:a1:19:d9:6b:74:90:
27:a2:0e:8b:d8:8b:5b:55:57:76:02:69:e1:f6:62:
31:cf:be:5f:3f:c1:d2:09:80:02:72:a8:50:85:e5:
3f:26:34:ca:6e:6c:9a:af:14:5d:f9:c2:93:68:28:
a5:34:c9:35:60:d4:47:72:89:63:da:ac:1c:d5:0c:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:08:14:85:79:E4:74:DB:1B:A1:E3:16:84:4F:F2:70:82:7E:8B
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:38:d0:1d:5d:72:27:8a:62:52:75:82:57:af:34:49:04:
b8:0c:d8:ef:0a:4c:d8:0d:c8:50:f2:be:d3:53:01:f2:26:d9:
23:c8:c3:aa:ff:a2:da:f0:32:4c:58:33:7f:dd:02:fc:32:08:
95:93:29:12:7e:7d:18:ff:94:c2:40:bd:2c:f1:fc:e9:29:df:
1d:2c:cb:c6:3f:92:6d:28:b6:d9:2a:06:fa:e1:55:1c:9f:fa:
23:24:84:f3:c2:cb:0a:c0:4d:32:6d:7b:af:09:0a:05:1e:b0:
c5:c3:56:32:e2:e2:9b:67:12:5f:7f:a7:6e:b9:1a:4b:2f:78:
a3:b2:ec:e3:ed:71:09:2f:28:18:0f:91:8a:02:39:bf:0e:e3:
94:26:0f:fc:9b:fe:04:46:b6:94:da:26:64:3c:e7:89:65:bd:
98:ab:74:a3:e0:e4:2f:57:7e:44:b8:dc:b8:0f:fc:bf:2f:bf:
13:1e:80:39:06:e5:0f:08:cc:d2:50:23:fc:8a:fa:97:7d:bc:
96:10:f5:0e:e9:70:bc:4d:76:b3:03:a9:26:33:7a:9b:54:88:
e2:26:e5:63:1d:bb:b6:55:dd:a5:a0:b8:af:f5:8f:f4:c9:36:
b7:59:1d:63:05:3b:35:93:77:72:44:6a:bb:c4:6f:35:72:97:
5f:07:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:33:07 2025 by rpki-client