Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier: kdNoz5NpF9v/zmmjjLOJIc4sCVDfZuz6kh2zEJfNb/s=
Subject key identifier: A2:CE:D8:15:57:41:C7:FC:D4:93:B5:50:7E:ED:00:A5:05:97:ED:AF
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 019A73011FF42D17C76A984D639D059A8104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number: 0C50
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: LYLFK/aVbgrg3wRfYOoGX/vyBKwm5mELh7uxhflpU0Q=)
2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1f:f4:2d:17:c7:6a:98:4d:63:9d:05:9a:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=a2ced8155741c7fcd493b5507eed00a50597edaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:15:50:ec:41:3b:75:a0:32:8f:2d:60:05:2a:
dd:76:bd:79:3b:45:5e:5b:0f:0b:e6:e6:2e:e8:b8:
11:90:52:9e:5d:76:99:14:5a:0a:e3:a5:d1:2d:6d:
0c:62:aa:07:77:65:c5:b4:f7:26:10:d5:d4:2e:94:
87:85:ac:4f:97:11:c3:d4:ef:79:17:0a:2f:b4:9e:
05:c0:f5:7c:8b:b8:5f:35:88:13:aa:4f:b1:42:49:
45:43:67:28:ed:6d:b0:43:1c:ee:5f:63:ee:2b:62:
5b:21:99:2f:9c:2e:d7:fd:ea:a6:80:9d:3e:3e:3c:
2c:90:0b:5a:79:41:37:a1:d5:ce:6f:9d:53:f3:fa:
ba:a5:9f:80:4b:fa:30:6c:2e:37:8d:42:d0:29:c9:
8f:6a:42:fc:e1:8e:a7:83:b7:38:d9:ad:d3:69:05:
30:48:d5:79:3d:5d:c4:9c:72:f4:52:18:60:30:3e:
8e:db:11:b0:fc:60:12:ad:62:4c:7b:8f:19:d6:62:
9e:f3:a6:0a:0b:cd:9c:9e:58:2c:3c:3b:e3:91:3e:
5b:17:6c:f6:aa:4a:e4:53:b9:22:dc:a0:97:93:b0:
1e:6a:b7:c0:6f:47:88:c1:e1:be:46:64:e5:60:a1:
fb:96:3f:aa:35:6b:a6:a0:42:49:f8:a6:38:e5:22:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:D8:15:57:41:C7:FC:D4:93:B5:50:7E:ED:00:A5:05:97:ED:AF
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f1:5e:35:eb:fd:c6:ab:06:6a:05:1b:71:32:2b:65:8e:f7:
63:26:af:a9:26:c7:d6:52:6d:65:c5:b9:23:23:3e:67:b9:92:
86:9c:b3:18:87:1e:3e:34:50:af:c0:28:54:e8:a0:16:f3:a0:
f5:72:26:42:71:23:c3:02:bc:0a:d4:5f:46:87:c8:1f:0f:40:
8a:92:5f:50:42:e0:73:c3:30:b9:fc:d8:19:92:42:6b:1f:98:
78:be:3e:dd:d3:f8:8c:a2:06:00:b4:f9:55:06:fb:67:b2:7c:
51:63:76:40:5b:1c:21:97:32:53:8e:88:25:09:6e:45:2b:cb:
92:51:fa:52:0f:dc:c0:9f:2d:3a:38:94:22:10:fb:cd:46:a3:
9d:45:4f:a1:b3:d4:11:ea:99:27:3d:14:32:f5:b2:5d:78:80:
88:21:1e:f5:79:8d:45:6b:25:ae:06:ef:52:5c:43:77:bd:6f:
d0:0e:c7:6f:e2:9a:3d:d4:92:e3:7a:77:13:9a:7d:98:bd:d3:
9a:29:6d:53:c2:68:74:06:10:76:f0:40:e9:46:7f:10:17:ed:
59:e4:03:ea:8e:ab:44:3c:b6:c6:dd:56:e8:c9:8d:7f:59:0d:
4c:86:73:1b:5b:38:1e:35:bd:d4:57:b3:e5:e4:15:a6:cb:9d:
87:a1:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:19 2025 by rpki-client