Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File: lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier: uJFlbiEYvGjYBEH4yn5PImQQDFYZ1ylUY6yTp79hBg8=
Subject key identifier: 9A:A1:13:FA:90:0D:D0:D6:7F:E3:E7:67:5B:F8:C7:99:B3:37:AC:8A
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 019A71B8A164004ADEF91A1E30958B572E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number: 1676
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: V6dzQYTukirsU-gqtCUSWtxmwyw.roa (hash: TAhPxTUSZwI4JsrpdkkvjRG18+wELOBapOWsonm/zpw=)
2: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: W8wJqZr5U1GQDOc2RkLTaE9NszZhvOcHeKWm9ms3ZHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a1:64:00:4a:de:f9:1a:1e:30:95:8b:57:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=9aa113fa900dd0d67fe3e7675bf8c799b337ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:31:f1:8c:de:53:97:d7:f9:08:f4:6d:b1:
b7:a3:d9:ae:25:dc:8f:16:dd:e8:f7:82:ad:4b:40:
64:3b:16:b6:03:db:69:43:c5:d0:bc:b0:85:cc:0d:
e4:f0:0f:63:a0:c5:e9:a8:0d:8d:f8:55:86:08:21:
5f:27:d1:76:e9:77:1a:0a:2b:05:4d:08:e5:93:3e:
7d:67:2e:87:da:3e:99:75:f7:6c:a2:75:69:4a:dd:
ae:5c:e6:9d:3a:21:57:6d:f0:99:0f:3c:8a:90:70:
12:8d:5e:64:fd:4c:1c:60:37:78:48:ed:7e:8b:09:
13:18:58:bd:7f:d7:60:88:1f:38:fe:50:ad:8b:4c:
20:e3:e5:d6:3a:af:53:cd:02:ae:a9:6e:82:e9:8a:
d0:00:94:f9:b9:ca:be:65:cd:df:18:a8:bf:25:3c:
3e:04:bd:b2:90:5a:a1:db:f7:9b:23:ee:80:45:05:
2b:2d:12:64:4e:77:0e:d2:dc:a4:57:ac:19:60:97:
27:e5:c9:1e:2e:fa:27:fa:08:57:03:e8:5d:dd:bd:
84:b4:e5:41:af:8b:26:30:66:07:d6:be:10:21:d3:
da:ab:4f:44:e9:32:ab:16:fc:dc:f6:07:2e:6f:31:
82:3e:b7:fc:7b:c5:c6:74:0e:cf:38:6c:5d:c2:93:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:13:FA:90:0D:D0:D6:7F:E3:E7:67:5B:F8:C7:99:B3:37:AC:8A
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f1:5f:95:51:f7:e9:56:ad:a9:23:a7:1b:50:60:ea:fe:75:
ba:b1:c0:28:11:a5:79:32:f9:0d:1a:ea:59:31:d4:b6:ab:d7:
99:65:4b:56:e2:e2:4d:a2:fa:41:84:6d:d0:94:76:ed:0e:18:
e2:b3:6e:06:a0:af:ed:47:21:58:cf:11:71:ff:84:19:1d:3d:
62:ac:ff:0d:5e:47:d1:0d:d5:7b:5a:10:92:1b:f9:f1:20:93:
2c:81:b1:14:bd:24:df:d8:e9:86:f9:ec:5a:2b:9a:6f:04:66:
17:e9:0a:01:13:a2:99:f6:42:9e:ae:fe:4d:24:d1:14:3a:9c:
1b:d1:c6:5e:18:bb:39:41:9f:b6:0d:0c:80:93:41:7c:97:3c:
2d:70:4d:85:94:8e:e9:7c:b7:9c:e1:c7:79:85:d8:82:69:6e:
c7:7b:eb:2b:5d:9c:be:54:ba:22:cd:5c:bc:47:e0:da:ea:22:
37:5e:cd:f8:27:65:b0:ce:a3:38:b4:90:58:e7:ea:08:59:26:
a8:b9:b8:3a:3f:4d:09:1e:73:fe:1a:63:9d:9c:f8:27:c7:40:
67:e4:5c:dd:94:61:6e:4e:7f:14:08:40:dd:f1:f3:aa:5d:1c:
1a:4e:e5:60:c9:16:ef:47:bc:2b:ad:a5:d1:c2:c0:00:3f:bb:
4c:3a:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:00 2025 by rpki-client