Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: 49zDG2047ZsGmmOKArM1NK5onqweojysjoM0dnRmTIk=
Subject key identifier: B6:BC:BE:3D:05:9A:11:8B:F1:14:15:13:20:50:54:58:F3:3D:9B:4D
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019A2AB0EBF938E94613938F08A72BE6FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 07B7
Signing time: Tue 28 Oct 2025 12:00:29 +0000
Manifest this update: Tue 28 Oct 2025 12:00:29 +0000
Manifest next update: Wed 29 Oct 2025 12:00:29 +0000
Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: XJ/WnoyE4NWYmCfH1ooBkSbOeCWciRtABFzuZa4zdU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:eb:f9:38:e9:46:13:93:8f:08:a7:2b:e6:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Oct 28 12:00:29 2025 GMT
Not After : Oct 29 12:00:29 2025 GMT
Subject: CN=b6bcbe3d059a118bf114151320505458f33d9b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:2d:af:d8:ef:3a:93:e0:58:ea:e5:82:15:
81:31:55:0c:60:96:04:b9:50:d2:96:b9:9c:44:91:
fb:48:82:db:fb:4a:31:45:e9:7a:44:18:d5:b9:42:
62:25:f3:2b:30:27:fd:b5:af:c9:c5:2e:5d:e4:d6:
e3:73:2d:36:16:5f:bd:bf:20:48:fb:52:7b:cf:b1:
13:3e:1d:0a:7b:db:28:20:51:b1:2b:f4:ec:9a:be:
56:7f:ae:d0:c2:4d:e6:3e:d5:93:ee:59:44:b0:5c:
55:5b:b4:50:11:7e:be:7b:ed:b2:fa:93:6a:f5:5c:
6e:09:73:c2:76:67:d4:d0:cc:90:73:7c:da:67:f7:
8c:bf:94:7d:ae:ae:d5:c3:0b:4c:68:f8:d8:06:92:
44:b9:99:46:6e:94:70:13:2f:cd:9c:9a:f2:06:15:
8c:55:3d:8e:27:51:e2:83:f7:9c:c9:c1:94:ee:b1:
9b:00:1c:2c:05:27:ee:e7:21:1c:91:df:ec:d8:0b:
ab:c8:02:9f:6c:95:69:70:cb:18:30:57:0a:50:f8:
b3:43:77:20:5c:6e:87:ae:d7:9a:d4:40:47:95:a3:
6f:4a:38:ff:c8:66:ac:1e:56:8d:1f:7b:39:0b:cf:
97:5c:f9:05:5c:58:f6:8f:4d:a5:3f:a3:68:b3:fb:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:BE:3D:05:9A:11:8B:F1:14:15:13:20:50:54:58:F3:3D:9B:4D
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:07:9c:00:be:ec:5d:65:cc:db:61:e5:46:43:29:b2:d7:4d:
52:7a:10:e8:aa:c9:52:f5:e7:e8:3a:a3:11:59:f3:9d:f4:48:
f6:2b:d4:c3:20:96:dc:97:d9:b7:85:5a:c5:b0:39:5b:76:9d:
bb:d4:19:98:f9:57:9b:4f:f4:47:03:f1:a0:64:ff:c7:7b:d8:
37:f6:b3:d8:9b:ab:25:40:11:9f:1a:ec:34:2c:79:43:cc:7b:
e6:46:39:14:a7:96:49:f1:e4:1d:fd:aa:2f:cf:ee:c3:e5:a6:
d4:11:15:e0:ae:33:33:35:af:cf:3e:2b:64:1e:b1:ee:4b:75:
7a:79:49:54:7a:90:df:e7:0e:22:8d:23:64:dd:cc:83:96:94:
b9:62:7c:6f:0d:b2:37:0d:62:db:59:95:8b:6c:99:0f:c5:02:
b9:4f:f3:a2:f8:66:7a:a6:c1:0d:5a:a2:dc:c7:af:16:f5:3e:
26:b3:55:85:2a:60:5a:e1:21:80:af:2e:6b:48:b9:55:60:b9:
00:fe:d9:9c:63:35:48:43:65:04:22:e0:01:1a:12:f7:a5:7e:
62:13:c6:2d:1e:db:09:73:0f:e7:6c:1e:7c:97:a2:58:d9:e2:
51:b1:15:ea:81:70:0c:4e:d0:77:a1:72:ff:4b:2f:59:38:23:
42:18:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:03:42 2025 by rpki-client