Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: m+xxa72PNVH9hnPsiugw/cNcv6F/4hdv7BwVlit5pww=
Subject key identifier: 42:2F:0D:1D:B1:19:E7:62:1B:5A:A3:6E:D6:D0:CB:05:9A:FC:B2:0F
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019A307C7C0FDFA846AE0E064564C8EF4027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 167E
Signing time: Wed 29 Oct 2025 15:00:55 +0000
Manifest this update: Wed 29 Oct 2025 15:00:55 +0000
Manifest next update: Thu 30 Oct 2025 15:00:55 +0000
Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: +kwVE3w64XAvHakvNoc6pwb5CWRWqw5La2Zf04nyWlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:7c:7c:0f:df:a8:46:ae:0e:06:45:64:c8:ef:40:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Oct 29 15:00:55 2025 GMT
Not After : Oct 30 15:00:55 2025 GMT
Subject: CN=422f0d1db119e7621b5aa36ed6d0cb059afcb20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:a5:da:d2:2a:9d:b5:74:20:df:92:68:43:
94:87:8d:98:ef:56:cc:f7:3c:d2:c9:d2:28:bc:93:
4d:41:1d:c1:29:59:0d:80:08:6c:72:f6:b5:42:03:
b7:64:4e:95:da:14:66:40:d9:07:3c:9e:56:22:31:
4e:b2:7d:03:c9:94:e8:78:ba:d5:38:45:9a:1e:cf:
72:24:2c:6b:48:a8:26:b9:ea:86:79:74:04:15:a4:
55:24:95:8d:7b:13:02:c8:b6:97:53:07:c9:5c:1b:
00:1c:56:26:1b:d5:75:8e:86:30:2d:1c:a4:82:34:
6b:16:32:05:4e:3e:0f:fc:f1:cf:f5:25:b5:06:2f:
c2:22:cd:11:9d:7e:4e:bf:a4:1d:2b:e9:9c:a5:9d:
cc:ac:cf:69:33:d0:5f:c2:2c:98:70:e6:eb:0a:6b:
e2:e3:5f:7c:0a:4f:18:50:0f:5b:0a:a3:85:07:b3:
fe:84:14:7f:8d:5a:e9:76:b7:82:72:9e:15:3b:f8:
83:2f:1f:00:4b:da:83:5d:d5:71:ed:f4:43:c2:15:
8c:99:f7:2f:db:35:6b:fb:d5:12:92:77:a9:1e:fa:
3c:d9:cc:cc:f3:71:f0:39:4a:11:9f:aa:ba:7a:06:
00:5c:f2:9e:c3:77:2e:e0:e0:09:01:e5:e9:98:f7:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:0D:1D:B1:19:E7:62:1B:5A:A3:6E:D6:D0:CB:05:9A:FC:B2:0F
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:9d:ad:d8:a8:c7:34:5d:91:8b:41:e4:42:60:d8:ae:de:
04:fc:e4:c2:1f:81:21:db:18:bc:58:b8:a1:fb:22:ee:82:fb:
ea:a1:eb:e1:f0:10:a2:44:55:2a:ed:f5:b3:5b:1e:ca:6a:11:
13:e9:bc:14:50:80:9a:09:07:ac:b8:85:e6:ee:12:0d:06:6f:
18:87:de:37:b0:46:f0:01:49:7b:7b:1d:47:d7:b7:59:60:45:
32:64:5d:c8:d0:6f:2b:ba:c1:6e:64:ad:79:05:8a:bb:76:d2:
8a:92:b3:f1:08:aa:4f:c6:5d:90:7c:39:ff:eb:ad:82:73:8f:
bd:40:0b:b2:ca:b3:e4:52:ee:c4:99:6d:f0:98:06:cb:0c:ad:
d1:35:15:e6:0e:ea:cb:44:7f:de:d0:bb:ea:ea:f2:ef:e0:6f:
7f:33:d6:6f:c4:8a:ef:e3:aa:1e:9d:0e:91:b4:ed:1c:54:d1:
b6:fa:f0:26:db:56:53:14:aa:0e:3e:c1:b3:26:e2:20:af:5b:
b0:53:3a:0b:cb:23:6c:ae:cd:fe:11:8f:dc:10:5a:7f:54:08:
46:fb:f1:51:1a:29:d3:88:e6:53:54:67:9f:2b:48:16:31:2b:
b4:81:a4:36:54:42:5c:af:27:6d:7c:30:db:f7:3e:17:87:1d:
76:33:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:35:06 2025 by rpki-client