Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: M6qx0dqvg7XNcCGefeYGZjm0WuHBc+qXCsK29VIrBI4=
Subject key identifier: 24:F3:39:85:00:08:06:AF:32:11:07:68:54:BD:2C:F5:80:4B:6E:4F
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019A71EEC3CACF83B8482B1EFFC68EA92BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: uPZDxbb7iFrnCrNuyMCdVosm5zkCD21cQgtk2m/EseQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:ca:cf:83:b8:48:2b:1e:ff:c6:8e:a9:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=24f33985000806af3211076854bd2cf5804b6e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:80:1e:59:3e:20:95:c5:e5:8a:fa:4c:79:
03:76:dc:59:b1:5b:5d:18:17:07:f1:50:0c:b3:31:
a2:8f:d9:fb:78:9c:c1:47:f7:9f:b8:52:3c:ce:3e:
1d:9b:2d:bf:89:80:05:a7:84:5e:12:42:0a:b1:98:
3a:a8:2e:25:5c:0c:29:ec:90:7d:d0:ff:23:97:34:
32:31:b6:97:34:be:07:05:65:64:30:9a:bf:30:c2:
bd:4f:1c:47:5d:97:ed:62:20:e2:d8:c8:3c:a4:eb:
6a:5b:4b:d4:9c:bb:0f:26:fe:77:3f:3f:b1:5a:8d:
75:c4:4c:22:dd:98:f4:c5:d8:98:c4:bd:88:ff:f0:
2b:14:91:d1:45:5f:29:91:a9:25:b2:e9:84:35:75:
5a:1a:52:f7:eb:a3:5f:64:b3:3e:64:65:17:44:76:
93:90:e7:82:34:20:a8:9b:8b:ff:52:94:6d:0e:34:
ee:f4:2f:75:e1:97:d8:08:25:63:5a:03:9b:78:3a:
a6:32:ab:24:6e:77:ac:48:48:6e:19:92:c4:85:f2:
ab:cd:de:7e:7c:0e:f8:f7:60:09:81:a0:7f:5b:70:
4a:4f:7c:02:dd:35:c7:08:64:27:19:7d:d8:90:f5:
6b:68:28:db:ac:2f:50:fc:5d:3e:07:19:22:13:d2:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:39:85:00:08:06:AF:32:11:07:68:54:BD:2C:F5:80:4B:6E:4F
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:48:2a:3b:f1:0d:b4:db:c9:a3:23:3a:b8:78:07:f5:a0:
b1:a8:5f:78:07:f0:c2:d2:19:a4:b1:41:23:8c:03:29:4b:3a:
7e:a9:af:23:2b:71:c1:1b:b5:e3:73:bc:70:f8:fb:39:63:ca:
ac:d1:ba:1a:30:a4:ee:98:6a:98:08:24:5e:30:c9:04:83:1e:
9f:f1:23:0e:47:91:c7:a0:65:c0:57:3d:bb:d2:0c:7d:14:31:
a5:d3:b9:85:46:b2:b9:8a:d7:c3:36:e8:54:e8:b1:c5:73:c4:
81:d5:b6:ca:4a:7a:4b:7f:ad:6f:c3:70:a7:ca:3a:88:0d:20:
a9:76:9d:31:4a:8b:23:b8:30:24:d7:17:30:05:5f:bd:f1:4d:
2c:02:2f:12:f1:07:cf:af:ca:ae:4a:2e:4f:ff:6f:aa:3a:a4:
3e:2d:11:f3:01:5a:69:81:6f:f5:82:20:a1:f7:c9:df:55:69:
b2:bb:aa:4b:4e:d7:51:72:4b:b8:87:ae:c0:93:e5:2f:c3:f3:
90:c4:ee:51:48:f4:5f:48:b4:cf:68:93:0d:17:0c:52:a3:88:
36:e8:e0:bd:3a:8b:69:3e:d3:33:e7:e7:9e:f4:27:c1:23:f8:
7f:25:3c:50:32:8e:cf:12:e1:20:09:b4:7c:15:3c:1b:ee:de:
5b:7d:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:43 2025 by rpki-client