Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: K7AaRdSmd4Ek3nL0Nh5ihFoRH916QwIklMJ8kw2pch8=
Subject key identifier: E6:02:84:4E:07:26:7F:77:2D:B9:37:87:C0:D1:03:04:50:2F:89:76
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019A71B8658A97B63A705CD980CA6B408079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 04FB
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: rLs76DG0H6CrmyyjdkTGNJO7ueaydDinMCgG9naKt8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:8a:97:b6:3a:70:5c:d9:80:ca:6b:40:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=e602844e07267f772db93787c0d10304502f8976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:2b:b5:2c:0d:86:ef:9c:48:1d:72:80:77:
13:b4:f3:aa:87:54:d7:19:c3:fa:95:e7:41:dc:4d:
ae:27:22:41:50:e5:9b:53:73:4a:8e:d8:5c:5e:b8:
a5:97:9d:dd:db:d7:11:ac:32:f5:a0:a6:11:4a:e9:
17:ee:c5:42:c1:9b:a4:dc:ae:0c:cd:a7:cf:7e:a7:
ad:0a:41:28:c4:31:3c:91:0d:70:3d:24:3b:41:00:
b1:3f:c0:d8:aa:67:2f:14:34:b3:65:f1:45:f0:41:
e4:82:e7:45:c1:e8:43:19:71:31:41:c9:36:df:41:
c2:b2:f5:15:22:1e:31:ac:c2:f2:eb:76:3e:fc:ec:
8d:2a:da:2c:c4:00:e6:24:12:d5:11:4d:7e:4f:24:
88:b8:67:7e:84:52:82:2b:05:76:40:54:e8:55:12:
38:d8:ef:b1:6e:7e:97:b8:76:e9:74:2e:3d:73:c7:
6a:e5:e4:e9:02:07:dd:61:47:0f:1d:a4:92:dc:65:
63:94:e3:46:28:e4:75:3e:9b:17:cc:f9:1c:1b:a0:
ed:09:e9:c3:5c:fe:68:a7:56:8f:8e:5a:8d:bd:92:
8a:7a:a9:96:49:6b:1b:2e:09:22:45:3c:eb:c5:ad:
b6:27:81:f9:e8:52:d1:1c:f9:07:11:27:bc:ae:f6:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:84:4E:07:26:7F:77:2D:B9:37:87:C0:D1:03:04:50:2F:89:76
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:82:d3:17:e1:28:3c:d6:37:bc:35:c4:d1:62:53:b4:fd:
f8:19:ea:68:94:1c:8a:67:63:5e:f8:48:36:7a:6a:51:ed:f2:
77:11:4d:9e:bb:23:4a:ad:60:f3:91:f7:3f:bc:e8:69:ac:3c:
05:da:ed:16:2c:7e:32:1d:4e:f7:25:95:8d:5a:3e:f3:99:e0:
41:72:79:4f:93:13:bf:fa:2e:2a:5e:bc:7c:be:86:6a:d0:10:
42:28:fa:3b:f9:9c:50:8e:76:d2:2c:89:3c:aa:96:ae:e5:69:
01:8d:69:d9:bf:f4:b9:93:10:0c:ea:0b:d3:13:e1:a0:9b:07:
b7:84:16:d5:67:0d:89:17:51:f3:b7:1b:64:fc:e4:af:6e:f0:
5a:d3:52:25:85:b9:ee:e9:d8:7c:09:26:d6:f2:78:05:a9:17:
23:f4:80:72:b3:55:8b:4a:17:f2:c6:95:75:88:e7:ac:8d:e9:
ee:20:c6:0e:c5:ac:08:af:8e:78:7b:67:20:e3:49:e5:e8:b5:
18:e9:32:64:96:c3:6f:a4:d9:d2:21:24:af:71:df:dd:a7:a2:
56:57:86:6c:97:dc:56:f5:a8:2e:90:15:9b:b9:9f:d4:c2:3d:
e0:0d:35:81:9e:8f:0d:fd:c4:d6:ec:9c:a2:29:8b:08:d3:2c:
6e:e1:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client