Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: exMaTCOhMHVYrDZ/DfH5eXWTUvwu1QE5uS6NyItoTeg=
Subject key identifier: 4C:7B:6E:E6:53:19:EC:3B:87:9A:7B:3C:B0:47:35:AC:99:DE:58:E7
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 019A71B915D022A7CC5B0A82636ED76C4492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: ljFe28V2VpyvwLzJ5BHSkiAUemi6XyCpYexIsiDXaGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:d0:22:a7:cc:5b:0a:82:63:6e:d7:6c:44:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=4c7b6ee65319ec3b879a7b3cb04735ac99de58e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:7e:4a:c0:e9:6c:da:72:02:5b:d0:e3:3a:
4f:85:85:68:36:eb:58:bd:49:b4:8e:6e:91:3f:b7:
a1:2d:3a:d0:ad:3c:d3:f5:c6:b5:64:fc:d3:a9:91:
b1:f9:9a:e7:86:94:cd:f0:37:34:2e:3c:02:dc:54:
8e:af:eb:c1:a3:e0:a4:b0:73:ef:6d:27:4c:76:19:
8d:bb:fb:eb:e7:69:6e:a5:6b:d5:b9:35:b7:04:a7:
f4:91:fa:d1:9e:cf:84:a2:32:3f:e6:db:83:ef:d3:
db:54:0d:3a:ba:82:0c:4a:f2:c2:b3:f7:bf:bb:79:
4e:a8:75:db:ee:10:be:f0:a8:f8:4f:d2:d0:bc:b2:
2e:d6:30:33:7b:20:05:a5:4b:a0:ca:c8:58:56:21:
35:65:1b:bb:c8:fc:b0:4a:be:8a:69:6e:1b:43:44:
cf:a9:6a:36:a5:c2:a5:60:64:54:39:aa:9a:69:3d:
14:91:98:13:85:df:2c:ce:f8:e6:55:01:fa:33:3d:
51:f4:98:0b:65:5d:08:83:39:da:76:c6:88:40:ec:
58:c7:fc:69:2c:9c:e2:e5:59:b0:f7:d8:b9:6c:ed:
72:e4:8e:e2:1d:c3:5a:79:02:12:9a:a1:15:aa:c5:
bf:f5:95:28:2c:60:a9:67:71:a1:99:3b:7e:79:c3:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:6E:E6:53:19:EC:3B:87:9A:7B:3C:B0:47:35:AC:99:DE:58:E7
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:70:99:3f:5b:45:43:14:2f:15:2c:4d:07:9d:b3:89:b6:c9:
36:ef:71:7d:7b:3f:e2:52:f9:6d:89:fa:4d:f1:fe:2d:57:01:
17:63:d2:75:98:57:87:7d:0a:4a:b8:06:da:d3:66:35:4d:97:
a9:53:75:5f:d1:51:a0:17:44:6f:a7:80:7a:b1:b1:71:70:f8:
7f:8d:8f:f8:00:5a:16:e5:30:4c:2c:25:0f:73:ab:80:9f:77:
c2:f8:5b:bf:a7:5a:68:2c:d9:cb:1c:51:40:0c:14:d1:ad:23:
a8:a9:26:bb:05:de:5f:96:66:65:4c:17:f1:6e:42:26:4c:8c:
8a:49:55:21:1d:9d:62:b9:1b:7f:06:63:e6:6b:fc:d3:85:65:
c5:e6:4f:ff:19:88:61:ca:c3:6a:45:50:ea:01:6e:ce:83:60:
70:9a:c7:c5:0b:ca:01:99:19:aa:c5:e2:39:b0:6c:b4:9c:7f:
76:3d:3b:e0:58:32:d6:5c:68:0a:33:2f:fd:c4:73:cc:49:32:
ae:1b:cb:33:cb:b7:36:ab:9e:b9:21:42:57:96:01:90:03:e4:
65:5e:03:8d:4b:0e:bd:24:c8:66:ba:48:03:fe:fb:49:3c:41:
77:e0:54:56:5d:49:99:4c:80:c3:23:cd:70:e5:4d:8f:2b:17:
85:8d:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:38 2025 by rpki-client