Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: 8E9n+3SweSgM4HmiLrAz8aHsdpGU4535YPeXN1zzlMk=
Subject key identifier: 03:9F:37:F8:5A:B9:30:EB:85:E0:03:77:11:AF:7E:0B:61:08:20:4E
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019A72CA952396688E690BFE5197F8F7028D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: CM1I0g6vXtA41a0rBYPAv0a0YtI.roa (hash: x+yWLPFvIYaQ0HKjxHn7eS1o7Fpl3blU8cO8iwEiSFM=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: wyl/yS2GoilP5goUcbhn7zNNqDoV2FQS4eh9IZWX1xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:95:23:96:68:8e:69:0b:fe:51:97:f8:f7:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=039f37f85ab930eb85e0037711af7e0b6108204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:97:21:30:e7:a1:89:b7:98:a2:9e:e5:cc:
ab:9a:2f:70:0c:3d:da:b9:14:58:ef:b8:a5:f5:af:
5b:c0:90:22:41:5d:98:b1:a4:f0:2c:ba:8f:27:40:
ed:71:d1:ac:86:a5:66:93:2d:99:eb:12:5e:29:84:
b5:fb:b3:9f:bf:88:db:d2:a5:e7:12:0a:39:0b:57:
8d:b9:b3:18:d6:3f:7a:8f:32:e1:cc:39:da:8e:5f:
49:d4:ce:d2:0a:3c:c7:33:5f:9f:a2:16:71:32:0d:
f5:4f:81:99:cf:a9:13:45:e5:2b:9f:c1:36:2d:92:
4f:b9:61:c7:e3:91:47:d3:0e:46:e5:2e:3a:ea:2d:
19:b2:61:49:53:c8:5b:3c:41:3d:57:16:90:52:08:
02:63:52:cf:f9:f2:d6:ae:09:86:81:35:72:f2:85:
48:74:1d:13:b4:97:b7:c9:15:cc:6e:74:8b:de:f1:
25:7f:a6:61:91:67:78:95:4d:c7:21:47:50:b0:c4:
2f:56:9f:c3:11:0a:5c:3c:c0:40:94:d3:9a:49:a0:
2a:bc:51:24:2f:ab:5c:08:c9:8b:33:b9:b0:c9:fc:
d6:6d:66:36:57:d8:62:01:d6:77:2b:0b:19:cb:63:
d6:99:6b:77:eb:e5:e2:0f:c6:6d:0a:0b:86:ba:10:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9F:37:F8:5A:B9:30:EB:85:E0:03:77:11:AF:7E:0B:61:08:20:4E
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f1:e4:6b:3e:2a:cb:b3:28:a8:72:8a:96:df:02:72:7c:c9:
80:f8:85:86:4f:49:11:2b:10:a9:af:20:eb:c0:2e:9f:1d:76:
24:f3:81:d8:e5:33:d6:ef:76:f2:be:a7:43:48:05:60:05:84:
62:27:8e:1b:c2:72:c1:59:67:b1:70:c2:4d:71:58:43:ef:df:
ec:3c:48:7f:f9:1a:96:4c:ec:a0:96:fd:78:cf:bf:46:4c:73:
f6:87:19:7a:c8:c1:76:76:df:81:39:0c:33:ef:ae:16:0f:4c:
eb:6b:41:03:c7:c6:07:7d:cd:83:b4:1a:21:91:b4:cc:06:d7:
9f:f2:95:46:a3:b0:34:fb:ea:7d:b9:a4:b4:1f:95:f6:82:3a:
b0:c5:ac:c6:a0:86:ee:f1:43:eb:5d:1d:55:35:c0:4f:b3:94:
24:27:a6:d1:45:c8:f8:7f:e1:52:ca:a6:e2:7a:f2:b7:a9:70:
b8:a2:fb:e0:3b:12:56:e8:d0:0b:cf:22:e1:ff:1e:e3:f9:f7:
49:a0:72:29:5e:77:ad:bc:04:4c:9f:61:66:fc:13:50:ff:5b:
65:e5:64:ed:fb:d6:26:5e:1b:fc:f0:92:66:ea:d0:02:64:c7:
0b:5a:f6:70:9f:29:9e:91:29:51:c3:64:a7:d1:d5:b5:83:9e:
58:2f:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:35 2025 by rpki-client