Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier: b1PckeAdCWzqsEGAuV6UFrrck4nDew/ipxhfWftVLpA=
Subject key identifier: 6F:5E:28:E9:C5:86:D9:CF:90:9B:6A:AF:2A:76:A1:48:7B:99:A3:4E
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 019A711300BEEF553FB3170CBA119893F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: FC/dc6L7HFZ+rrEzchmOK6FbyL1MhhIFV1eiB2oPs4s=)
2: hx1AobN52MdMauAKbwiof1BpngE.roa (hash: 69thDY3N1zb82iIdJWyRKD2mWa/WKlKqpVSoW/+g4+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:00:be:ef:55:3f:b3:17:0c:ba:11:98:93:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=6f5e28e9c586d9cf909b6aaf2a76a1487b99a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:ae:2b:ad:c8:1e:10:1d:d6:54:59:d2:d9:
2b:a8:49:05:94:f5:f2:2b:bc:05:45:04:fd:b7:77:
ea:64:54:2e:ac:85:69:d8:20:df:54:45:49:c0:c7:
11:ea:da:87:19:e7:69:59:eb:06:2d:aa:8d:43:9b:
10:3d:db:58:50:20:0c:5b:7c:28:5c:20:f5:5e:84:
75:ab:8d:f0:f8:c1:b4:69:a2:c2:f0:c1:26:b6:3e:
ca:e2:be:a6:ba:9f:66:7c:e5:9a:82:de:5d:e6:8a:
29:a3:fc:38:05:86:45:9b:64:8c:d5:31:55:16:a5:
a5:79:c7:d0:4b:65:5d:ae:39:8d:6a:a7:74:0f:78:
39:23:ef:ab:49:75:22:e1:f3:09:ea:a9:03:11:94:
05:cb:30:0d:ab:16:4c:26:a9:4c:ed:27:1b:d3:d0:
1a:e3:6f:14:cf:09:33:8a:4e:42:14:ba:63:e4:39:
ba:75:cc:b8:81:1c:1a:d0:3f:4d:a6:d7:f5:bf:c5:
2e:60:b0:47:e4:9a:7a:5b:ae:18:7f:fd:d8:1d:1a:
9b:e7:85:f6:88:50:70:22:8c:7d:42:a3:59:f8:6e:
46:d4:d1:14:fe:ec:28:11:cd:ce:62:4f:3d:bf:08:
f0:bd:85:4e:1c:51:35:36:6c:c1:3c:06:b4:03:e0:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:28:E9:C5:86:D9:CF:90:9B:6A:AF:2A:76:A1:48:7B:99:A3:4E
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:bc:4e:28:71:f5:97:7b:9b:28:6b:19:ae:c5:94:8b:27:
af:5b:f4:7b:33:e0:0a:9f:6c:5b:ec:08:73:c2:db:c5:91:af:
85:3c:37:9a:8e:27:06:f5:63:9d:b7:46:cf:cc:20:9b:6f:36:
09:fb:e4:55:07:c4:a2:6e:a5:92:56:85:74:35:19:ce:33:76:
64:c8:30:4e:73:f9:f3:d7:e9:76:66:72:4e:85:9b:6e:25:30:
95:b1:58:c4:5b:16:31:30:88:b1:25:1b:75:10:be:d2:de:78:
36:fc:52:54:2e:2b:ae:e0:4e:5e:37:8c:6e:29:dd:53:a0:ea:
e9:fe:d9:2f:dd:2f:83:94:f2:42:87:96:cd:50:bc:49:c0:82:
a7:60:9b:ba:ea:81:af:87:ff:64:0e:f5:c5:3d:82:f9:10:17:
e2:a9:1f:1e:63:68:77:9b:9d:2e:7b:fb:e8:a5:31:5b:06:73:
7d:1c:7b:c0:b6:35:aa:07:a2:88:c8:a4:19:6f:09:9f:a2:27:
cd:44:e2:8c:1b:1e:52:0f:f0:7c:41:76:3c:14:63:1e:15:cb:
e1:cc:1c:63:97:75:89:44:53:68:3a:14:49:20:58:2d:50:62:
e2:35:89:2f:7e:17:cc:ce:65:86:c6:ce:50:a9:73:8b:d1:13:
1f:83:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client