Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: PkxuwQ2oSy9AKA+xysgw3Wx4x/EvsK5L7A5NCELcvKM=
Subject key identifier: 3B:42:41:0F:CD:47:35:94:EF:F3:E5:D8:06:30:C0:BE:C2:AC:CF:2E
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 019A71B7CABA30E0A8A164CC9A03A36A9290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: 9ac/fyd38l0s6WMm7kOi3obMJEVGDGILDBgxt9qdeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ca:ba:30:e0:a8:a1:64:cc:9a:03:a3:6a:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=3b42410fcd473594eff3e5d80630c0bec2accf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:18:b8:ed:a7:d9:25:47:2c:c2:15:e2:ec:
52:92:e4:a8:42:6e:ed:16:cd:51:6d:f9:d9:18:4e:
7a:c5:b2:c4:5c:f6:42:7d:1c:f2:1d:11:40:89:f4:
f7:eb:76:09:1d:ed:d3:5c:1a:f7:84:68:10:a1:18:
66:07:76:8b:9d:42:e9:f0:08:37:62:89:8a:f2:bf:
5a:cc:94:56:73:91:da:c4:e7:eb:7f:e6:0c:68:6a:
d0:6c:2a:c3:4d:fb:bb:1a:f7:67:32:3e:23:d9:fe:
2e:5e:49:a3:9a:56:98:93:4f:1f:5c:35:a6:fc:36:
76:d6:bb:6f:60:f9:28:d9:c0:c6:54:e9:1f:52:02:
e5:ce:09:fa:f5:34:97:39:6e:9b:8e:ca:3d:39:6d:
b8:b9:b5:8f:64:fb:3d:4f:56:be:23:96:ae:d4:2d:
fb:24:d0:dc:e0:06:97:76:34:60:d7:d7:f6:14:39:
cf:06:ea:9e:fd:8e:91:a0:13:c8:cb:54:07:81:29:
b2:69:e5:35:fc:16:3f:1c:4e:0b:82:a6:f3:16:4b:
a8:8b:00:bd:22:ff:c9:f7:65:db:2c:71:41:89:eb:
b9:c5:61:72:17:92:14:1b:67:e7:88:0d:02:21:30:
46:02:d1:01:2d:c4:1a:6b:5c:2f:ed:e3:3f:7e:cb:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:41:0F:CD:47:35:94:EF:F3:E5:D8:06:30:C0:BE:C2:AC:CF:2E
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:db:b6:cd:52:7d:1c:d9:16:ab:9e:a7:f9:1a:76:95:ec:
8f:fe:03:b7:f2:72:d1:f7:a0:f3:88:47:c4:2f:d5:46:4e:3c:
ee:44:5a:4d:80:7b:d4:6f:46:b1:95:0e:31:0e:3e:91:98:55:
6b:7d:bb:9c:67:02:f6:8f:db:51:b3:f2:15:5d:66:86:f9:24:
00:c0:ed:a1:29:fd:6c:70:29:1f:4c:80:52:ca:da:d4:32:c4:
b6:ee:0e:34:64:0b:22:bd:cb:d9:71:e9:79:f4:92:4a:c8:cb:
88:58:cd:07:f6:46:fd:75:07:c3:a3:ab:40:7f:73:de:56:65:
5f:d7:9a:04:46:b6:28:e1:76:f1:8e:0e:ca:ec:05:96:9a:f5:
2c:26:15:8e:9c:98:09:9e:78:72:bc:30:3d:7b:46:f8:10:e4:
98:d2:1b:c5:99:b3:34:a6:d7:ca:59:19:92:27:21:45:25:02:
e7:83:a9:75:22:f0:7b:d0:d8:5b:86:43:88:01:91:e6:18:2c:
d6:2d:86:4f:f1:61:23:4a:d2:2a:a5:df:e3:b0:1d:88:85:64:
99:5e:77:bf:bc:bf:0c:e5:43:eb:16:1b:54:b1:5d:27:3a:39:
ed:0e:e3:8b:0b:91:07:18:62:24:28:a9:6b:42:38:8f:e7:ae:
6a:7d:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client