Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: DPGuQAvgzikXl0I7h8t038UAZHElzo6TJ+ufboWWv3g=
Subject key identifier: 6F:93:21:2D:34:0A:68:11:22:F6:30:0E:65:6B:60:C1:9A:5F:16:9E
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 019A7225FC25986E9F38D80D9860A5CC764F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 099F
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: +VFQIfsFY9K+CTnLnsl8t+k7ZjPJw86a8Mw1/xO5Hzs=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fc:25:98:6e:9f:38:d8:0d:98:60:a5:cc:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=6f93212d340a681122f6300e656b60c19a5f169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:92:13:1b:c1:d4:b8:e7:42:8a:fa:cb:53:
c7:0e:01:29:7d:0b:c1:03:a6:9e:f1:4b:e2:ed:12:
42:d0:b9:05:e5:54:ff:39:3d:fb:46:02:7d:ef:bd:
5f:f1:9e:b9:76:98:d8:f8:eb:e0:4d:7f:e3:f9:3b:
ac:5d:eb:15:80:68:76:26:0b:63:1a:b9:e1:df:fa:
93:8f:8e:19:5b:d8:a2:f3:bd:80:60:86:8e:fd:93:
e4:09:17:4f:6b:de:06:ea:39:a5:42:18:46:1f:1c:
f6:58:a2:75:c9:31:1b:66:84:84:73:3d:c5:9c:06:
92:49:7e:7d:5e:28:bf:b5:5d:08:2f:a7:c7:a7:f3:
e4:bf:1e:53:a8:6c:55:cb:00:4a:45:16:82:85:1a:
80:61:ec:7c:4a:14:93:4a:84:62:31:63:92:d5:79:
ac:d1:eb:21:97:ed:05:c1:a8:bf:e0:f3:c3:d4:f4:
84:2b:90:79:91:1b:86:93:92:9b:67:f2:b0:80:7b:
99:5d:76:91:88:82:7e:ea:c8:5a:02:ca:16:7e:08:
b9:cd:de:7f:97:ee:51:db:a8:0b:f5:57:2f:f0:45:
3b:15:68:da:51:14:67:76:b5:82:a3:f1:ef:ce:5e:
f4:7b:28:29:60:b1:64:e5:eb:51:09:f4:8c:31:e6:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:93:21:2D:34:0A:68:11:22:F6:30:0E:65:6B:60:C1:9A:5F:16:9E
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b2:8a:f0:90:fe:42:ac:9d:34:25:d3:e3:5d:34:e2:2d:72:
a0:32:bd:73:5b:a2:4e:9e:72:05:2a:fb:aa:95:55:6b:0c:fb:
24:70:03:01:50:a8:7c:dd:c3:88:b1:31:e2:31:2d:39:81:b4:
44:bc:97:6e:94:48:0c:63:04:ce:f4:62:0b:3b:41:8d:cf:00:
a0:fe:eb:ad:75:c4:c5:57:d9:42:d9:c0:ba:a3:5c:0b:64:2a:
04:3a:7f:9f:2a:77:0c:83:f3:75:79:35:58:4b:d9:ce:8b:0c:
0a:35:50:74:48:d8:13:9c:9a:be:06:7e:ee:0e:89:39:07:72:
25:54:a0:8c:0d:55:38:c4:6c:7c:3b:92:2b:8d:a8:72:d8:08:
c9:e7:65:01:ae:09:85:5c:f3:26:9b:f5:ca:78:f7:72:9e:4d:
26:b4:91:51:64:d0:bb:a1:5c:ac:8e:29:cd:8a:3d:07:91:1d:
96:15:e6:28:38:25:de:34:b0:54:3f:3a:49:e1:64:e8:2c:20:
6f:18:82:1e:9f:13:eb:65:06:ae:f9:14:fb:52:5e:bc:a7:72:
1e:7f:99:50:88:c8:a1:96:9d:64:9f:de:14:9f:28:6e:6a:ee:
f9:f3:ea:b8:57:c6:3e:0b:d9:d1:73:a7:29:ba:61:24:2f:59:
98:95:29:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfwlmG6fONgNmGClzHZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj
ZGQyMTMwHhcNMjUxMTExMDkwMTIzWhcNMjUxMTEyMDkwMTIzWjAzMTEwLwYDVQQD
Eyg2ZjkzMjEyZDM0MGE2ODExMjJmNjMwMGU2NTZiNjBjMTlhNWYxNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt6SExvB1LjnQor6y1PHDgEpfQvB
A6ae8Uvi7RJC0LkF5VT/OT37RgJ9771f8Z65dpjY+OvgTX/j+TusXesVgGh2Jgtj
Grnh3/qTj44ZW9ii872AYIaO/ZPkCRdPa94G6jmlQhhGHxz2WKJ1yTEbZoSEcz3F
nAaSSX59Xii/tV0IL6fHp/Pkvx5TqGxVywBKRRaChRqAYex8ShSTSoRiMWOS1Xms
0eshl+0Fwai/4PPD1PSEK5B5kRuGk5KbZ/KwgHuZXXaRiIJ+6shaAsoWfgi5zd5/
l+5R26gL9Vcv8EU7FWjaURRndrWCo/Hvzl70eygpYLFk5etRCfSMMeb7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+TIS00CmgRIvYwDmVrYMGaXxaeMB8GA1UdIwQY
MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt
ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw
LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLKK8JD+
QqydNCXT41004i1yoDK9c1uiTp5yBSr7qpVVawz7JHADAVCofN3DiLEx4jEtOYG0
RLyXbpRIDGMEzvRiCztBjc8AoP7rrXXExVfZQtnAuqNcC2QqBDp/nyp3DIPzdXk1
WEvZzosMCjVQdEjYE5yavgZ+7g6JOQdyJVSgjA1VOMRsfDuSK42octgIyedlAa4J
hVzzJpv1ynj3cp5NJrSRUWTQu6FcrI4pzYo9B5EdlhXmKDgl3jSwVD86SeFk6Cwg
bxiCHp8T62UGrvkU+1JevKdyHn+ZUIjIoZadZJ/eFJ8obmru+fPquFfGPgvZ0XOn
KbphJC9ZmJUpFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:53 2025 by rpki-client