Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: 2DB5azG7lGGrw94pC9uJZrZRF0xbHVdIDAPCY0KJeYk=
Subject key identifier: B3:9D:2B:83:2D:28:AE:EC:FE:8A:85:C7:7A:31:93:2D:EC:C7:1A:88
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019A7149ECF102B2F0963210F187BF17B9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: ZSnWZS2bnwCO1R3SOwicaRjn96rzZQDAZgIc8nu99dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ec:f1:02:b2:f0:96:32:10:f1:87:bf:17:b9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=b39d2b832d28aeecfe8a85c77a31932decc71a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:85:14:c4:03:12:99:60:ef:1e:be:a1:4c:
50:0d:1f:6c:b3:7b:cf:40:ee:c1:67:60:90:d7:f2:
f6:d4:14:f7:d9:f9:f1:e1:38:7f:83:4b:8b:13:39:
fa:8c:e7:79:6a:ec:f9:86:19:ad:7a:a6:3d:80:ca:
d8:82:18:c1:0b:9a:40:1c:79:fa:25:32:69:e3:95:
ee:50:9f:a6:4d:92:7a:63:59:72:cb:32:23:87:1b:
0a:ea:b3:71:b5:5c:d1:30:3d:c2:b3:2f:88:9b:06:
3e:a3:34:34:ad:1b:94:66:84:9b:9d:10:98:f1:3f:
bf:67:f0:98:87:1d:1e:26:1d:91:40:39:40:c1:19:
14:5c:fd:1f:99:fc:22:e7:f4:08:fc:60:3a:27:1d:
16:76:36:db:0a:96:8b:64:b3:ad:de:2c:44:ec:ad:
11:1c:16:6a:1b:0b:b1:fa:ec:10:02:63:30:03:1d:
03:42:28:b1:99:7a:e1:8e:59:32:bf:ae:6b:ce:d5:
63:c8:73:52:ca:b6:69:7f:cc:22:df:7a:e9:f9:8f:
42:9d:4d:f2:0c:d2:48:09:c0:be:66:90:fb:7d:54:
3b:ff:2e:0b:e2:cb:54:83:79:9d:0d:99:7b:56:4d:
c2:8b:b1:6f:2b:dc:c7:96:19:06:33:b1:6c:6c:7f:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9D:2B:83:2D:28:AE:EC:FE:8A:85:C7:7A:31:93:2D:EC:C7:1A:88
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:9b:91:58:3b:2c:46:31:c7:c4:28:6e:14:65:93:0e:6c:
f1:5f:23:e6:61:f7:3b:09:0b:ed:af:6e:d7:6c:b8:81:87:53:
c8:b0:bb:56:c6:b1:62:2a:95:cb:37:c6:fc:c9:fc:6e:c2:de:
11:b3:7b:99:ec:32:d5:23:be:56:cf:9e:3b:3e:a0:34:d6:1c:
a4:dc:63:16:c1:c8:7a:6f:bb:d4:5c:99:47:bf:c9:7c:12:45:
95:53:f7:b1:c2:61:83:13:f7:f1:45:1a:ae:10:95:05:0a:a7:
1f:16:e3:3c:2b:0f:ad:cb:52:a5:95:dd:d6:81:8e:5f:fd:f5:
e2:4a:b4:93:d9:75:fe:14:2d:cb:31:ba:cf:76:43:7a:17:af:
ab:a5:b6:3f:6a:89:30:42:4a:14:c0:44:34:dd:b6:49:88:29:
bd:6b:8d:dc:36:28:37:28:2b:d8:24:77:88:11:53:83:60:a9:
e7:89:98:c3:ea:91:d8:55:94:80:b0:d8:6e:b2:e6:60:7b:ab:
f8:fd:3b:d3:9e:f4:46:4a:d0:f5:32:4b:3e:16:23:b2:ff:ca:
1a:2d:a7:b8:01:06:28:c2:24:82:5b:83:f3:48:f7:8f:99:82:
8a:1a:c9:a4:3d:82:e0:d6:75:71:71:e0:00:17:e3:e3:16:fb:
2a:03:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client