Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: rYlLDReicGlOmOTRj7fVGJs33pG9MMkFCHVpHV7pfX4=
Subject key identifier: 2E:CA:C9:AF:B2:A7:67:19:68:36:5A:4C:25:7F:3F:CB:2C:DF:13:7D
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 019A71B8B34FE9287315CFBED6F4D9072350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0361
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: L2hGsXQwmWYsMQemk3ghWz9RFFA5mIXbM8ibL+04v88=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b3:4f:e9:28:73:15:cf:be:d6:f4:d9:07:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=2ecac9afb2a7671968365a4c257f3fcb2cdf137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:25:3a:e4:49:4c:2c:c5:cd:37:a8:67:4d:
39:09:ee:b9:d3:13:9d:0f:59:b8:15:6d:27:f2:c9:
57:85:be:8d:50:d8:76:f0:a0:93:a9:8b:f8:ce:c8:
d0:19:ca:e3:f2:e5:71:64:da:82:f0:bc:53:17:95:
c2:6e:27:4b:04:c4:26:cc:bc:97:4e:96:e9:66:3c:
d9:e8:77:27:3c:18:f2:c5:a7:8d:f6:fc:60:d0:f1:
74:ac:48:03:7d:b7:13:87:9d:76:d9:9c:6a:c8:06:
04:bd:a5:0c:37:01:63:9c:7a:cf:11:9f:3c:ef:bd:
a1:7a:ca:3c:90:a2:06:65:cb:67:db:16:5e:f7:55:
d4:b7:97:02:0e:7d:88:9f:7e:e5:7f:ac:71:04:30:
a1:68:50:d7:f0:17:8c:a3:a2:a1:73:54:e2:bf:99:
16:59:df:b0:78:f7:fc:fa:70:20:3c:18:2f:36:04:
f0:7b:c5:c0:d1:8e:0d:4e:d3:68:a8:0d:46:b8:98:
1c:ab:ab:55:02:13:8c:ff:77:3a:43:5a:c4:a3:37:
fe:eb:91:9b:ef:84:0d:3a:7a:2f:c4:c9:0c:af:25:
37:3d:30:d9:0c:b4:34:eb:cb:7e:c3:77:53:03:41:
73:cb:4a:84:82:63:32:69:df:3b:11:1f:08:4f:9e:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:C9:AF:B2:A7:67:19:68:36:5A:4C:25:7F:3F:CB:2C:DF:13:7D
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c6:b5:b2:93:af:57:27:13:0e:8e:35:e6:ce:80:78:34:b9:
58:64:db:6c:d9:85:b9:da:61:32:3b:ae:1d:64:37:57:bc:de:
bb:99:a0:e8:12:1a:58:4e:0e:51:b0:0f:3c:d0:bf:9c:3c:fa:
89:6e:c4:60:13:b7:81:f2:3d:f9:fd:4b:34:c7:e8:5e:74:43:
db:24:df:ea:2d:8d:35:93:bf:28:96:09:0a:f9:33:2f:50:1b:
4f:9b:65:b4:ce:39:e1:cf:f8:a7:8f:fb:e4:45:03:93:70:f1:
06:5d:bb:f7:70:6c:a6:dd:b8:e5:2b:77:1d:80:bf:16:85:ed:
5f:4e:7c:83:b6:72:db:f5:e2:30:08:46:76:b9:08:53:d7:2e:
18:7f:80:64:bc:d1:80:82:9b:a2:0f:bf:20:51:e4:e3:40:35:
c8:51:c3:5c:fc:dd:b3:4d:e9:78:e5:31:30:64:39:59:d1:a5:
7b:5f:7a:dd:89:42:61:a2:c6:ef:bc:96:0b:6d:a5:50:d3:17:
80:7d:07:5a:eb:d8:72:a7:71:05:35:07:f0:15:9a:0e:91:b2:
21:12:e9:64:73:69:54:72:8a:79:1b:ba:47:ce:64:ce:f9:36:
dd:2f:a6:27:d7:b8:15:22:37:cc:f5:d7:eb:56:ca:9b:3a:f8:
70:69:91:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLNP6ShzFc++1vTZByNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjUxMTExMDcwMjAxWhcNMjUxMTEyMDcwMjAxWjAzMTEwLwYDVQQD
EygyZWNhYzlhZmIyYTc2NzE5NjgzNjVhNGMyNTdmM2ZjYjJjZGYxMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4lOuRJTCzFzTeoZ005Ce650xOd
D1m4FW0n8slXhb6NUNh28KCTqYv4zsjQGcrj8uVxZNqC8LxTF5XCbidLBMQmzLyX
TpbpZjzZ6HcnPBjyxaeN9vxg0PF0rEgDfbcTh5122ZxqyAYEvaUMNwFjnHrPEZ88
772heso8kKIGZctn2xZe91XUt5cCDn2In37lf6xxBDChaFDX8BeMo6Khc1Tiv5kW
Wd+wePf8+nAgPBgvNgTwe8XA0Y4NTtNoqA1GuJgcq6tVAhOM/3c6Q1rEozf+65Gb
74QNOnovxMkMryU3PTDZDLQ068t+w3dTA0Fzy0qEgmMyad87ER8IT57CpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7Kya+yp2cZaDZaTCV/P8ss3xN9MB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsa1spOv
VycTDo415s6AeDS5WGTbbNmFudphMjuuHWQ3V7zeu5mg6BIaWE4OUbAPPNC/nDz6
iW7EYBO3gfI9+f1LNMfoXnRD2yTf6i2NNZO/KJYJCvkzL1AbT5tltM454c/4p4/7
5EUDk3DxBl2793Bspt245St3HYC/FoXtX058g7Zy2/XiMAhGdrkIU9cuGH+AZLzR
gIKbog+/IFHk40A1yFHDXPzds03peOUxMGQ5WdGle1963YlCYaLG77yWC22lUNMX
gH0HWuvYcqdxBTUH8BWaDpGyIRLpZHNpVHKKeRu6R85kzvk23S+mJ9e4FSI3zPXX
61bKmzr4cGmR2A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:16 2025 by rpki-client