Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: VwWa20Re2IXjBldA1MD6oU43sLO6TSlk2Lv7CUdLFQg=
Subject key identifier: CD:DE:AB:90:D1:B6:EE:E9:EB:CE:49:8C:9E:5E:99:A0:38:04:1A:F6
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019A7293ACDFAAC22E775CBD6CB652109F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: zC5z8Z/oQDvQzYueg23GBFD8pKm99StONxVmKosjWUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ac:df:aa:c2:2e:77:5c:bd:6c:b6:52:10:9f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=cddeab90d1b6eee9ebce498c9e5e99a038041af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:e8:85:b7:5b:8f:73:82:b4:05:20:32:02:
b6:fc:15:35:f8:a7:67:db:29:43:07:18:ae:bc:0d:
a0:9b:34:b0:d3:37:fc:66:18:53:a3:ef:c0:8d:dd:
84:79:64:6b:5e:a1:ab:e4:3b:4a:9c:7c:5a:71:d9:
a9:25:0f:3c:7b:a2:12:d3:42:0d:e1:58:04:b9:24:
96:a9:db:9e:10:cb:63:e7:12:ea:51:05:ff:f6:8a:
de:ad:3e:3e:1d:4d:30:e1:00:2c:d1:24:d5:f3:c3:
08:ca:ea:bc:56:39:e3:1a:ca:12:62:7e:c5:8a:86:
5c:12:36:8a:7d:df:ce:38:f6:73:53:7b:28:2a:6b:
52:da:60:77:6c:d2:1c:b8:d7:8c:cf:00:32:7e:71:
96:83:f1:bf:14:ce:d9:62:42:7e:fa:8e:50:14:ff:
c5:c7:94:58:c6:ee:dc:0d:a1:a2:11:bd:1c:34:a6:
5d:12:bb:8b:2a:0b:fe:28:75:0d:38:2e:53:6d:90:
09:20:8b:cd:89:e2:02:9a:cc:24:b4:89:a5:8a:92:
50:7b:6b:86:0b:f0:c7:2d:53:82:ae:a3:2f:fa:ed:
2b:d4:cb:7d:1b:c5:80:85:2b:95:86:cf:89:6f:3b:
8c:01:2c:8c:da:f5:c4:c6:fe:03:55:fd:70:5c:52:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:AB:90:D1:B6:EE:E9:EB:CE:49:8C:9E:5E:99:A0:38:04:1A:F6
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:0a:1a:88:2f:03:92:20:9d:07:03:46:6f:39:0b:b4:28:
7d:76:50:7c:a6:ee:d6:7b:b5:91:1a:4b:3b:85:b6:17:ac:7b:
6d:cf:1a:a2:0c:50:b8:96:5d:e2:fe:23:5f:c0:49:0f:7e:89:
28:99:31:42:3a:9e:0a:bb:d2:b0:80:18:19:d9:ad:1c:c6:30:
55:30:bf:fc:5e:0c:af:2a:5e:eb:76:88:10:cb:12:b5:77:2e:
e0:08:60:27:7d:39:10:be:e7:19:3d:0f:3b:4b:10:52:a0:38:
09:15:9f:de:35:bf:eb:6b:59:85:51:de:4e:56:84:0c:22:84:
e0:08:e5:de:b0:cc:44:92:e8:45:49:7a:1f:0b:8b:0a:42:07:
f0:ab:1f:c1:ab:ae:ee:69:89:4e:3b:99:97:d1:cb:b6:d9:bc:
d1:86:49:71:7b:0c:09:f9:9b:90:63:8a:39:a0:fb:b7:33:d7:
f6:e3:57:41:95:69:55:47:c0:29:27:76:f0:ee:4c:88:5e:a2:
3b:47:8e:b9:69:06:e9:89:ad:12:52:55:77:4d:b2:3e:5a:ff:
32:d5:04:06:cc:7e:ed:84:b8:ef:d0:db:89:ea:d0:17:db:bf:
ee:4f:ee:c4:f5:bb:f4:d0:15:bf:4d:8d:6a:81:27:e4:65:5e:
38:d2:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:30 2025 by rpki-client