Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: wT0pBtSkSPMr6A/wzqW7XqbGQpaPzF87gRS0nIfNRPY=
Subject key identifier: FF:01:3D:F4:1C:35:95:7E:1E:72:ED:57:41:92:E6:0A:D3:EE:C1:71
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 019A72266CEA44DA74C46BF359A1F6DE378B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 010A
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (hash: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: TOuHB0KrcYxdfp0nQWnNDEYE6bemjk30p+h4A55twds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:ea:44:da:74:c4:6b:f3:59:a1:f6:de:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=ff013df41c35957e1e72ed574192e60ad3eec171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:37:6a:20:93:c9:16:c0:8b:3c:2b:33:54:
9f:d3:7b:63:af:5e:78:2a:47:78:48:43:16:cf:43:
0e:95:26:47:f1:15:66:32:1e:32:22:de:24:cf:ea:
49:24:58:fd:e3:fc:f9:bb:e3:ca:bc:8b:20:fc:ec:
d6:45:d3:09:e1:0b:f6:e7:e7:59:6f:24:4a:70:e8:
da:3b:25:bf:e5:3b:85:30:e6:e0:18:f5:e1:8c:f9:
81:78:74:15:72:b6:e5:53:f6:df:78:82:f6:22:63:
2a:55:95:9e:63:c3:eb:3b:c9:84:a0:97:0d:f4:85:
07:18:ca:69:bb:e2:76:88:94:2c:60:43:00:59:57:
05:14:12:06:4c:c0:02:37:43:db:bf:11:4f:31:8b:
3e:1a:82:7f:f7:6c:e6:91:9b:3c:85:95:a5:0b:1b:
4d:27:26:e6:97:68:fd:62:42:13:2f:ae:76:62:fa:
5c:51:99:91:34:e5:e1:5d:78:3c:29:d8:e4:72:d2:
1f:19:79:82:a0:f6:01:21:90:75:b2:a9:ba:95:4a:
5a:b9:9f:80:8d:fb:02:9a:92:ac:15:ff:d3:d4:bc:
8f:22:71:1d:a4:2c:92:c2:f4:86:9e:72:b6:40:d5:
0c:22:42:c5:37:84:63:2b:bb:73:bd:ec:8c:90:c8:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:3D:F4:1C:35:95:7E:1E:72:ED:57:41:92:E6:0A:D3:EE:C1:71
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6d:63:3a:3f:20:c7:12:28:77:ca:ea:36:f6:cc:55:2e:32:
64:78:2e:84:99:7f:fc:c1:4f:4f:52:ca:9d:63:a8:50:d8:ef:
1f:71:b9:3c:0e:31:03:70:35:a6:9f:c8:a7:01:8e:d3:1a:be:
f0:0f:74:49:c1:2c:dc:74:06:8e:37:f7:ce:56:06:45:22:f6:
60:e3:1f:9f:e4:6a:37:5b:27:cd:09:30:76:4b:b6:2d:c1:96:
6e:0f:4d:63:c5:b6:76:b4:d6:0f:bc:a8:4b:c1:d0:c4:df:04:
85:fa:33:d0:52:f7:8d:c0:8e:43:ed:64:b0:b9:9c:4e:fb:da:
8a:1f:15:2e:ef:07:90:d3:00:6e:c1:7d:a5:e5:fd:93:1e:03:
33:79:4c:43:6f:04:74:64:0c:22:df:e9:7f:f4:9b:6e:24:53:
7e:0d:dd:c6:e1:c8:31:ad:54:2b:b1:21:df:a7:88:0d:dc:61:
f0:b1:cc:50:d7:00:38:26:7e:a7:69:2c:61:07:ce:9f:d6:33:
a6:cf:8d:0c:d6:03:3f:b9:ea:df:81:6b:f6:fd:ad:c1:e2:06:
cf:cf:5f:c4:b2:2d:51:fd:be:2b:94:3d:75:14:6f:03:c1:df:
54:b0:21:34:ce:bf:dc:3a:30:0a:36:a7:23:76:06:a7:e9:77:
b5:c0:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:06 2025 by rpki-client