Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: 02UprkmQ6wCvyDa1p89Qw6ViupPiq1fxtaLFlqXaTrg=
Subject key identifier: 99:E8:41:94:29:00:FC:EF:D5:75:7C:26:76:69:F6:8C:B3:79:78:D2
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 019A725CB4DB1610DE3E7F0AF4215D95FB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 06CA
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: evteyoKAbjejU46nnuACUjk7Wnalf4q3t0NTvvpDHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b4:db:16:10:de:3e:7f:0a:f4:21:5d:95:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=99e841942900fcefd5757c267669f68cb37978d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:7c:1f:c1:14:cc:c1:f9:25:88:8e:2b:2f:
30:b8:04:81:41:67:b2:ed:79:5d:a0:ab:ef:c8:cd:
50:54:6c:33:c2:25:65:9d:69:db:12:19:29:65:15:
d0:9e:49:20:e8:b2:cf:ba:8c:ce:cd:45:04:fa:cf:
ba:4f:3c:0c:12:09:c7:69:a7:c3:d3:cf:05:38:6f:
21:da:47:51:7d:79:f3:24:8c:7b:24:3e:ca:28:e2:
db:aa:f9:80:42:99:32:01:f0:0e:84:80:ec:7f:b2:
d6:a1:75:f2:32:79:7d:05:cb:90:05:4a:15:63:bb:
c4:aa:18:a5:b9:79:58:49:4b:60:dc:15:5e:71:09:
8b:a9:c3:6f:91:c4:bd:50:e0:1b:63:be:d7:da:3f:
52:dd:36:f7:64:a9:e0:10:b1:4e:d3:cd:79:03:38:
a2:55:00:a2:f0:30:a5:e3:2c:a5:a5:46:de:80:22:
f1:58:a4:b5:88:dc:12:ed:43:b8:55:6c:7b:84:1c:
1c:d2:36:5f:1a:11:6f:1d:4b:98:07:7c:9d:70:5a:
09:0b:17:14:11:2b:93:81:d5:3b:9b:a8:0b:d8:e6:
fd:78:c8:c0:be:4e:52:76:65:d3:e0:a7:f6:e2:db:
00:56:ce:07:57:2f:0d:14:98:d9:95:9b:8b:7d:c2:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:41:94:29:00:FC:EF:D5:75:7C:26:76:69:F6:8C:B3:79:78:D2
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:36:2e:dc:c1:71:04:ab:4f:c7:9f:a0:eb:75:76:3d:5b:0b:
6a:03:0c:63:84:1b:a1:dd:6b:79:ba:c5:6f:14:b5:15:67:de:
6f:08:ea:c1:de:3e:c0:26:ae:a2:15:6c:cb:6c:ec:cb:e7:53:
0a:e8:5d:74:a4:72:c7:83:52:88:ea:f5:38:ab:79:97:be:db:
aa:bc:2c:6e:b6:f9:18:8e:74:d1:57:42:be:37:4a:69:e0:0b:
2e:57:83:66:ea:35:27:5e:18:1f:83:05:d5:e8:3e:fa:a7:76:
b0:b5:d2:9d:08:21:b1:17:8e:0c:54:0c:ca:02:ee:de:6c:4a:
6a:a9:e7:12:47:ad:c4:80:09:33:af:4a:4e:ab:45:0a:e8:6f:
84:e6:b8:77:b7:bd:de:3e:cb:d7:e8:fb:bb:a1:e8:aa:27:11:
c2:af:37:73:1e:d4:95:85:29:77:22:70:f0:1a:84:c9:95:c7:
d7:e6:ba:a3:93:f7:fe:fb:1a:df:cd:a7:4a:91:0e:5f:6c:3e:
8a:69:e1:2f:4f:bf:0a:91:15:37:7a:17:85:89:18:0b:45:0f:
99:84:ad:73:b0:a5:9a:32:bf:ca:55:f9:01:18:63:40:68:03:
85:2d:63:d7:9c:05:fb:03:7a:64:b3:13:1d:2d:68:11:9c:1e:
36:4c:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:53 2025 by rpki-client