Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier: t9V2uc0EU65GB8o6QuS8qtdFpll9aWcFgAFIPeboxsU=
Subject key identifier: 43:C6:CA:40:16:17:93:34:0F:2F:27:B3:FF:B3:3E:1A:4D:E7:D3:E7
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 019A71807F3ECD3E046D7C34ADCEADC9B5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number: 0648
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=)
2: 2ln04Sg9DivwIxT4Jv87YLQ6VeI.roa (hash: g09lK1EFFtoN7I42vdwkeDH5p7Q5p78NRRZq7eIR1YA=)
3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: DY8aztfRfUEa7/POkSWJrln0oAKWUC5l5LQM2Tr2yuM=)
4: zJpW5AryOfpuFShU6Wx7sRKJLe0.roa (hash: kHndwEH09Z6K6s5i2KfWYNtL/YWUF/jq+TLxVETYvrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7f:3e:cd:3e:04:6d:7c:34:ad:ce:ad:c9:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=43c6ca40161793340f2f27b3ffb33e1a4de7d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:a9:83:c6:fc:88:05:b5:4f:f2:ae:0e:36:
d2:b4:c2:dc:fd:a3:13:0b:0f:bc:58:c0:54:92:82:
6f:8c:b1:d2:54:90:66:d9:10:f1:ab:84:f3:2c:96:
e2:a9:d0:87:2d:c2:50:17:f2:95:5e:8a:83:ec:4a:
12:41:e3:33:67:42:1e:75:ea:70:f8:17:58:27:d9:
62:ae:43:92:a5:a4:16:9e:9f:20:d4:94:57:ff:e4:
aa:77:c5:0f:0b:f2:ed:12:9a:5a:0a:90:75:be:70:
a6:c6:4f:81:73:61:7e:a0:36:5a:74:d4:50:7d:27:
0d:a8:2e:55:3f:28:1c:1e:08:36:fe:b7:83:04:d6:
8a:26:38:5a:30:35:f3:76:67:a9:6d:d6:83:de:f0:
94:08:39:d0:8e:ac:c7:3b:c8:a7:78:ea:a1:bc:da:
4a:b1:1a:ed:51:ec:35:f7:f8:7b:12:b6:e4:02:73:
26:58:8f:63:a3:13:da:b2:74:2b:f2:1a:eb:a3:c2:
63:74:0d:3e:0b:5e:e3:ba:a2:3c:62:a4:17:41:be:
99:12:48:44:bf:38:07:9a:cb:fb:09:69:a6:2d:93:
55:11:01:84:19:9e:b0:ca:f3:97:8b:0a:6a:e6:db:
08:2f:6b:b9:f9:14:f0:39:5b:0f:49:bc:bd:ba:bb:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:CA:40:16:17:93:34:0F:2F:27:B3:FF:B3:3E:1A:4D:E7:D3:E7
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:59:49:c9:4b:22:49:62:9d:f8:22:1e:75:f5:19:11:48:cf:
7c:26:0c:70:b8:e9:d4:ea:b2:ba:fb:bc:11:a0:bc:0f:67:e0:
2d:8b:b8:c7:f0:87:bd:c7:34:30:75:a4:5c:f1:05:ab:77:2b:
5a:90:1e:45:30:77:0f:f9:40:5b:9e:3c:99:29:70:1d:9c:15:
80:0d:49:f1:34:a3:af:5f:ea:ef:76:25:17:1d:82:7e:02:81:
c1:87:2e:18:33:21:24:60:bd:79:f8:97:55:69:61:ac:9c:f0:
79:4c:91:f9:9b:7e:31:96:7b:c3:a0:33:55:7e:c2:06:93:c6:
78:fd:93:ea:ac:d5:e3:a1:35:df:32:03:74:9f:e6:13:a6:2f:
96:f2:62:17:1f:74:3e:d6:35:7c:8f:e5:31:6f:aa:cb:12:82:
a1:6b:76:f3:25:85:bd:17:f9:1a:50:46:67:04:03:9a:87:25:
75:c3:68:6a:56:ab:1f:c1:d0:4d:8c:63:18:f1:ac:9e:19:80:
15:8b:6d:53:3c:9e:28:2b:82:f4:a3:c1:38:65:09:7e:20:9c:
99:1e:03:9f:53:b8:32:52:90:20:a4:9b:db:3d:ea:cf:f0:07:
80:65:1f:9c:2b:4e:02:4c:c5:6d:b3:b6:e4:13:4c:6e:c3:f0:
29:a5:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:19 2025 by rpki-client