Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: ZbMujJxABHA3rZQC2/WmGrlcJeDmYRZFDnroGGFOMhg=
Subject key identifier: E4:A4:F9:5A:C4:CF:A2:28:59:DC:7C:6F:AE:9D:05:43:38:C3:54:17
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019A4D3CF75B76269D2E0E9AA35594F29F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: 4+mAPdwDLwDZJUWRdRd0lU62Ej/GvHv8CbTHkCWb6gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f7:5b:76:26:9d:2e:0e:9a:a3:55:94:f2:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=e4a4f95ac4cfa22859dc7c6fae9d054338c35417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:e7:9c:6c:76:73:8e:a6:81:38:e7:4b:2f:
62:7a:96:ad:73:c5:be:63:07:b1:f6:59:b8:a3:9b:
eb:b1:76:b4:1c:20:c5:fb:64:94:a0:72:32:7b:17:
db:99:11:99:90:b5:d1:54:e9:80:0b:11:a9:f0:16:
5d:5e:3a:63:6d:cf:af:9c:9d:50:37:16:78:bc:57:
12:16:15:65:ee:00:74:55:b2:c9:ad:a0:46:a0:d4:
49:44:97:6c:f5:41:15:f4:ca:59:fe:f3:73:02:6d:
bb:55:85:ed:a4:9e:ca:a5:00:71:55:64:96:e4:6f:
1b:8f:d0:a0:17:6b:d9:ad:a7:f2:a6:58:7c:3a:c2:
0b:54:1c:cf:f6:97:9c:00:2a:b6:05:42:f3:9e:61:
71:2b:70:17:46:ed:13:1b:85:1d:85:37:62:cf:f2:
ef:ad:cc:bd:de:a4:4f:9f:af:1e:cd:85:cb:69:f4:
46:08:0e:f2:19:36:a1:12:6c:f8:2f:5d:fb:c3:81:
22:61:77:76:6a:69:69:03:5c:c4:82:01:b5:99:91:
1e:fc:84:e3:19:d2:54:47:ed:0a:73:ac:35:2e:d2:
03:a4:92:b6:bc:ec:d3:13:70:1b:20:fd:c8:d3:58:
a7:03:f9:50:45:d3:a2:a1:29:09:d3:7c:4d:27:6b:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:F9:5A:C4:CF:A2:28:59:DC:7C:6F:AE:9D:05:43:38:C3:54:17
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:68:db:57:f0:2e:7f:97:c9:57:0c:90:65:08:23:06:6f:
8b:07:b2:21:48:45:75:cf:9c:68:c3:5e:21:8b:f1:ba:5e:26:
b2:04:ef:84:7f:68:cc:ff:6d:d7:b5:55:e1:de:1a:b9:ad:e9:
9d:73:95:75:d4:12:b3:04:1b:57:79:bc:1a:9b:13:f6:d1:b7:
cc:40:94:f6:91:59:ef:f5:32:9c:0f:c1:4e:09:71:0a:4c:f0:
25:aa:26:ce:3d:cd:8a:04:dd:f8:04:6a:28:d1:91:a6:c4:6e:
e1:a5:76:c4:14:d4:31:67:ab:2c:2e:49:87:45:b5:8e:52:2c:
41:ef:d6:38:79:28:2b:5b:7b:54:50:fc:ff:02:2b:a8:c4:8c:
7f:57:89:b6:9c:9c:58:92:d7:41:1f:af:16:92:fa:f2:74:7f:
16:57:14:f4:bc:31:c3:02:0e:ff:e5:4c:77:4b:d4:af:4c:73:
62:b4:a2:65:51:00:c0:6e:5a:01:15:51:87:cd:06:22:56:e7:
cf:32:f9:15:89:d4:03:70:8d:e1:aa:dc:04:58:c9:c2:cc:fe:
a1:86:2a:7d:46:e4:fe:b8:90:70:fe:bd:a9:bd:28:c7:38:b0:
62:af:2c:8f:3a:87:1d:1d:fe:20:f5:9a:97:9c:98:34:fc:ea:
64:d2:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:06:28 2025 by rpki-client