Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier: gXnhkom8W+JbrNR3hiZvoAg54nWNRipAIvjEyp35eEQ=
Subject key identifier: 18:66:04:17:3F:11:90:F1:CC:DB:37:CB:5C:27:12:81:96:06:E3:37
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 019A71B8B5CA819270937F2C646B1F0F9437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number: 10E7
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: JDbsNRiv_WMTlViBQXQ3g59gK5M.roa (hash: 5BHapuXzcbpJhpfOa/evo44J0f0F6BTnvXfMcpPhdEU=)
2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: TzOoZWqnbmLXcyRL5EWqQ9PvAvzfuDfQm0WaLP5PE+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:ca:81:92:70:93:7f:2c:64:6b:1f:0f:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=186604173f1190f1ccdb37cb5c2712819606e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:02:de:cd:78:a5:23:88:52:b2:3d:09:77:
01:f4:0f:57:0b:61:31:42:4d:65:19:d2:7c:74:81:
f0:3e:be:07:23:1e:08:7e:8c:ee:5b:e3:09:04:02:
0f:4a:c1:13:f1:f5:ad:9c:55:d6:42:6e:64:26:d3:
c2:ec:b5:0a:44:97:1b:24:fe:05:20:85:a9:72:b7:
78:59:34:75:58:ea:73:ae:ac:2a:e3:71:65:69:84:
19:b9:3e:fa:ce:44:d5:84:08:de:2c:e0:b0:85:5b:
8c:ec:d1:cf:8c:cb:7c:29:d4:0f:d5:07:b8:0e:db:
e5:14:7e:71:9a:f6:65:ab:50:dc:8e:5e:4e:c5:cd:
54:4a:88:24:0b:3c:0e:17:34:ad:a8:cd:a6:4f:a6:
4f:0f:11:9f:d9:48:f9:68:11:ab:ab:80:25:6b:7e:
5e:72:89:43:ee:35:eb:7b:14:77:31:d8:64:0c:e1:
2c:05:ce:7c:70:74:e2:fb:69:cd:21:10:2b:25:fe:
67:06:9f:c8:9e:7b:b4:e9:fd:e6:a8:00:84:bf:c9:
f4:67:dc:4e:b6:98:fb:27:0d:70:bb:2d:3c:08:35:
b5:97:38:44:1f:16:e0:11:91:b1:bb:3f:ae:d3:a6:
03:16:d1:32:91:f5:14:74:c5:03:0b:00:51:ad:7c:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:04:17:3F:11:90:F1:CC:DB:37:CB:5C:27:12:81:96:06:E3:37
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c9:de:d1:1e:66:8a:35:b4:9f:2b:ca:99:62:19:b5:00:a0:
63:41:37:48:b6:cd:b3:c9:ab:b3:49:7e:45:5f:3e:ee:a1:3b:
93:f6:23:dc:ea:ba:36:c1:e5:f3:eb:6f:5a:ff:1a:7b:f2:0b:
00:6f:66:a1:3c:8d:ac:5e:a7:38:14:d1:28:a6:aa:76:09:c2:
87:d6:4a:1f:f8:4a:29:58:15:ab:7e:c2:3b:27:e9:db:a8:0c:
9c:db:89:bb:84:78:2d:fa:b8:12:48:27:7f:f0:dc:b8:e0:7d:
30:61:cd:33:e3:28:a9:c2:73:f2:c8:a5:48:c3:96:a5:ae:0b:
ad:a8:50:d3:76:30:03:7e:a0:51:3f:8d:09:79:33:9d:bd:36:
ab:6b:04:cc:77:c6:11:31:46:0f:68:10:0f:56:5b:53:4b:e2:
35:ac:4a:b4:b2:71:d7:42:eb:3f:1f:87:4e:a3:aa:4c:16:81:
7c:2b:29:75:25:42:59:03:f0:17:f0:87:64:74:ac:af:f9:70:
21:30:ab:33:bd:4d:59:7e:d9:1c:56:01:a6:70:48:5c:ec:f0:
a6:de:b5:a6:f4:95:c3:8c:84:4d:99:c5:7e:d8:ca:31:ce:64:
24:8f:3b:5a:79:5a:26:2c:ab:3f:97:c0:e6:c9:8f:99:15:47:
e3:e2:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:21 2025 by rpki-client