Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: p1jd64C0+llulMGGojMrxH39UDMmXMdImoBZSmqB+T8=
Subject key identifier: D0:E6:F1:D4:B1:B0:AC:B7:50:0D:B7:E5:A8:91:F7:14:33:A3:21:B0
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019A70A56A5BCF17ABCD715DF3608DA5187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: F1
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=)
2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: aC2z9mIM+nSStTr6W4IsGv1c3qvp7UjY0e2f7QwRKcA=)
3: RpIHAkjNePBkljRPnB1JIyBSnvw.roa (hash: qyk9tqBXRznFnx7BG2DU1S+w/7N7AXbDrx47mo90s+Y=)
4: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6a:5b:cf:17:ab:cd:71:5d:f3:60:8d:a5:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=d0e6f1d4b1b0acb7500db7e5a891f71433a321b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:d6:01:3c:8b:68:39:d7:17:21:d7:2e:3e:
19:8b:b9:fa:1c:83:4e:4c:ba:43:b3:a9:fc:a3:ae:
cd:be:55:2c:8b:8a:ac:f5:45:a6:17:06:14:54:19:
50:e6:b1:29:02:14:70:8a:5a:ad:55:34:00:dd:a1:
e3:ff:f7:e8:00:a9:f4:de:f6:96:45:cf:eb:f7:34:
9c:6c:9e:50:0c:4f:20:27:c6:db:6a:8a:2f:63:81:
d0:9e:91:0f:65:05:1f:5c:e1:cf:76:b8:67:b1:8e:
b4:6c:fd:f5:e0:a4:c7:f1:00:91:1b:33:3f:c8:81:
0e:21:35:be:5a:9f:35:3f:a3:25:19:64:29:eb:8c:
72:77:d7:b8:ee:56:37:7c:ff:6f:3b:cf:3d:ab:f7:
b7:60:04:3d:1c:cd:a8:c7:26:8f:12:41:0d:2a:70:
97:c1:71:d6:12:84:47:7d:ec:bf:06:80:df:e5:34:
e5:b0:bb:52:fa:76:f4:6b:f7:39:7e:8b:e2:5e:87:
ad:94:1b:26:9b:21:48:9c:78:0f:11:89:7d:9b:32:
3e:4e:6e:67:c0:e8:9f:7f:a8:ef:f4:29:6e:d1:d9:
06:a9:c0:b7:15:64:a3:8c:56:09:1d:74:41:c3:ca:
b3:c1:fe:ef:cf:a8:fa:e3:1c:0c:2f:72:6e:85:cc:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:F1:D4:B1:B0:AC:B7:50:0D:B7:E5:A8:91:F7:14:33:A3:21:B0
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:cf:30:b0:d7:cc:17:a8:d4:d4:01:41:14:01:b6:30:b8:
bf:fe:f7:b5:f1:9c:fa:14:a4:43:bc:89:2a:94:e3:58:24:b7:
bf:ec:94:2e:3a:6e:99:9e:8d:c6:93:a4:68:e6:67:df:e1:0c:
20:3f:9c:73:97:8c:b4:63:9c:51:f1:15:75:1f:95:a7:5f:94:
c1:d4:3b:0a:40:98:b0:5f:30:5e:c3:3c:7b:76:94:bd:3f:8d:
96:ff:09:fd:49:26:f5:96:4d:4d:06:f7:f2:14:a3:69:36:c1:
9c:33:ee:f9:85:94:0d:18:4a:49:42:9b:e3:81:27:6a:17:5b:
d6:4d:4d:bd:90:dd:26:f1:70:c2:83:3c:93:2a:1e:6d:40:21:
5b:98:69:6e:68:bb:7e:88:17:d3:7b:3d:b8:16:6d:a9:50:62:
27:19:b2:6f:f1:34:1f:a2:d5:37:62:ec:ed:8a:30:81:a8:4e:
11:69:51:44:dc:9f:3d:37:37:8a:d1:2d:af:d7:7c:35:db:f7:
e5:71:d9:55:58:9a:7c:00:a5:e4:c9:c3:6b:f4:ed:8f:ee:c1:
85:2a:1c:40:5b:a6:65:57:60:59:ee:a1:53:38:e5:3a:39:95:
ad:4f:48:98:7c:fe:2c:2a:79:ef:c5:54:d7:f7:ba:16:3f:de:
d1:77:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:56 2025 by rpki-client