Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier: O240mGuYJUguwsSZKPvNC8cLAXzJRztM6Bo7Dl9bQ0s=
Subject key identifier: 24:B7:F8:8D:1F:01:3B:69:34:7F:C7:F0:6F:A9:02:7A:EF:CF:78:25
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019A7149C18A6BCFA5B161A3A51E6089667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=)
2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=)
3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=)
4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: NmJVoZpXsVKFro/ElV47GGHjS2VNS3CF21wNltXLUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c1:8a:6b:cf:a5:b1:61:a3:a5:1e:60:89:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=24b7f88d1f013b69347fc7f06fa9027aefcf7825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:73:6d:7e:b2:37:32:d2:cb:b8:e9:ef:e2:
e7:f1:29:a8:f6:ce:3f:10:a1:69:de:3b:fd:dd:15:
23:35:38:71:2b:b5:2a:70:26:82:c5:61:5c:1f:06:
57:31:59:24:b4:b8:24:f3:33:97:33:ba:06:8f:bb:
2d:1d:00:cd:82:e0:5f:de:12:52:f0:50:57:68:b2:
15:4f:b4:eb:c8:68:41:c2:a2:41:09:92:0e:77:43:
1e:4e:d1:42:a0:61:22:bb:87:0c:77:dd:b4:e9:b9:
4d:75:78:58:42:5e:a0:74:0d:21:af:7c:49:8b:4e:
f5:69:6c:7a:48:b2:d7:56:6e:62:48:4d:e3:22:2c:
07:18:22:ac:29:47:0e:5e:ed:9d:17:2c:1e:b9:93:
6a:5e:ff:2b:ee:2a:89:bc:6f:c2:14:d5:40:d1:58:
bd:12:27:3a:2c:25:9b:bc:85:73:c2:23:f5:d1:09:
3c:92:cc:e0:fe:13:ba:72:dc:5a:b0:bb:ea:4c:8d:
ae:51:70:59:6e:72:05:ed:1b:64:a5:af:a3:25:bb:
39:09:7c:f7:51:80:e0:55:7f:82:42:84:23:00:86:
16:08:38:6e:77:31:00:97:62:4e:67:03:da:b9:b9:
88:99:43:06:df:38:ce:3c:45:7d:fb:4b:25:d1:db:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:F8:8D:1F:01:3B:69:34:7F:C7:F0:6F:A9:02:7A:EF:CF:78:25
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:24:47:f1:9f:a8:b6:69:20:1d:a6:b9:ef:b9:6f:cb:91:58:
59:de:12:85:fe:0c:7d:29:62:f1:c1:3a:f2:63:c1:fc:90:eb:
d8:61:ff:6f:09:48:43:98:7f:a1:84:7c:48:40:3d:25:de:de:
c9:ea:7d:15:79:b6:95:3f:43:da:6c:93:69:53:25:25:3e:87:
61:b4:fc:3e:5a:9b:b6:37:9c:b3:40:d8:d8:77:04:fb:2f:53:
77:75:98:c5:30:e0:b3:a2:6a:0a:f9:a6:87:e0:a7:97:52:89:
3f:fd:6e:63:98:e3:08:b7:0b:06:c1:fc:a1:47:25:b0:48:b8:
f4:61:df:58:a7:5a:e7:80:51:fc:f8:70:c4:4e:24:dd:18:37:
73:5b:47:0e:18:9f:d2:8d:a9:5d:02:6b:74:77:d3:5d:c4:2c:
cb:cb:68:f8:e7:86:dd:8c:2c:38:79:6b:b7:fd:f6:20:1e:13:
23:2b:32:56:10:6d:13:27:5e:df:97:90:04:5a:a3:e8:62:75:
a6:f9:dd:fe:cf:a7:65:39:16:72:ef:99:e4:43:55:00:16:b9:
45:10:5b:c9:3e:7d:de:32:6b:56:56:00:1d:ed:ac:bb:67:c2:
4b:ca:c3:6b:32:0e:5b:41:ef:e4:f3:8b:70:6d:94:49:de:8c:
58:85:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client