Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier: A+7MfDAlZBQEyOlQ4n/16OSLCB6MdLuv/2CD0d9vJ9c=
Subject key identifier: 9D:3F:57:11:FC:6A:FE:CD:8E:08:8A:ED:01:CD:A3:C6:FD:23:96:1C
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 019A71B7B207786730F8A3A5BB00446D6789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number: 0600
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: BG4EDTf6dIA3JULg1JWmBWIiSD71e3Y4K6F26+Ysnbs=)
2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b2:07:78:67:30:f8:a3:a5:bb:00:44:6d:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=9d3f5711fc6afecd8e088aed01cda3c6fd23961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:c8:b0:0d:d0:f6:f0:d0:5e:c8:ef:90:20:
ae:6b:61:18:49:89:42:5e:68:59:0a:55:91:84:47:
c5:ff:21:a3:a2:b4:95:76:3d:d5:ce:7f:fe:4b:c5:
32:9d:74:fe:0b:59:d5:08:f1:7a:35:9a:bd:18:ce:
36:b6:b2:bd:67:a7:74:c0:a4:04:dd:38:b1:39:93:
df:c2:a3:71:a5:57:49:5b:74:e6:16:f1:23:4c:e6:
cf:45:39:2d:2a:3c:08:20:17:88:ab:cc:36:ec:81:
3a:be:2b:fe:5a:28:85:28:51:4b:ea:09:e3:f6:61:
35:bd:ee:1c:73:9c:7b:be:6e:d1:c3:b1:d4:a1:d8:
15:03:4b:d1:c6:b7:b6:d1:c6:78:b8:1b:15:13:6c:
76:88:af:b0:99:9d:cb:47:ad:ae:11:74:17:82:bd:
a5:79:94:ee:84:e7:fb:2a:de:86:7e:f2:9e:e2:60:
b3:f6:b1:60:6a:e8:50:e7:7e:c6:28:21:67:9a:1c:
ec:a5:eb:ea:3d:b8:0a:4a:6d:71:4a:da:1c:7d:8b:
7f:b5:39:b8:ed:3e:9b:f2:fc:90:8c:70:20:08:19:
d8:1c:94:cd:a7:e3:71:45:c6:59:84:2c:2c:4c:59:
ae:2d:0d:c8:35:5a:40:2d:39:48:d0:c7:36:a5:31:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:57:11:FC:6A:FE:CD:8E:08:8A:ED:01:CD:A3:C6:FD:23:96:1C
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3e:e5:97:2a:37:c0:32:ee:72:d9:2d:99:1e:e8:4d:1c:58:
19:d5:53:46:3b:d2:d8:04:ee:88:ed:4f:aa:3c:71:f4:bf:12:
71:34:a8:9a:23:26:b6:ec:81:ef:9a:fd:d2:fb:17:3a:67:3e:
2b:8d:cc:70:2e:fd:7f:5c:23:33:cd:e4:9f:b6:aa:66:56:3c:
17:0b:41:13:3f:79:02:1d:c4:10:2f:91:d1:8d:c1:03:9c:3b:
6b:ca:21:5c:65:69:3e:4e:79:11:e1:15:e5:3f:ec:fc:29:c6:
19:33:3f:c9:3d:e5:c9:5d:7f:f2:b7:77:cd:ec:2c:3f:0d:61:
8f:0e:89:12:46:3a:48:ff:9a:84:4f:af:b6:91:96:dd:6a:7f:
c4:3f:20:51:8c:f9:e6:6f:b2:98:b8:50:40:95:63:1e:64:36:
d5:34:eb:b4:69:76:41:e0:f3:69:b9:ce:73:10:59:4e:e6:fa:
5b:ae:09:9b:23:c6:a8:f0:c9:dd:f3:82:50:7b:b3:86:1d:8e:
8d:37:65:1f:29:98:67:14:80:1e:48:e3:50:9e:e2:5e:bc:4d:
4e:d3:12:56:dd:14:da:be:3f:2d:43:1b:f5:d5:66:53:ff:f6:
01:c2:0a:ec:5f:fd:61:a7:c4:cc:a5:75:af:91:e6:27:ed:ac:
ec:c9:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:00 2025 by rpki-client