Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: CXT570YMt8H2Y25djYEtibbUcPvDmU8QQPg2ENU08jY=
Subject key identifier: 28:A4:E2:81:45:C8:E7:32:E7:76:51:40:FF:05:37:57:BA:C2:A6:1F
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019A725C736BF1B67D6C9956535D41CD1300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0DFE
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: SrOsZ/EetkmTKLTEUC5WuClSoaAWa9XRLPb0zer9PeE=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:73:6b:f1:b6:7d:6c:99:56:53:5d:41:cd:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=28a4e28145c8e732e7765140ff053757bac2a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:44:87:cd:3c:13:00:55:7b:e5:f1:81:8e:8a:
a4:18:9a:5c:ce:6e:b5:f3:b8:86:62:07:61:27:d0:
7c:e1:6d:47:52:e3:5b:f6:61:10:c3:c0:86:1a:c4:
be:56:7b:84:21:76:ad:90:c4:61:5e:bd:c3:87:ca:
0b:88:d8:38:57:37:a7:0b:03:ac:41:3a:63:45:b3:
53:39:f6:2c:fa:82:eb:ef:0e:bc:d9:b1:6d:d5:1a:
f1:73:16:3d:2e:c4:0e:30:59:87:41:b5:c3:cd:b0:
00:6b:3f:78:5a:4c:c6:6b:73:9d:a5:fb:0d:02:7b:
8d:2c:2f:22:78:21:c2:b3:94:6c:62:f6:8c:e2:08:
1e:fa:b4:59:6b:0d:f3:1f:47:3b:1a:55:cb:07:01:
53:be:cf:d6:0e:8e:20:af:97:fd:c2:6e:2d:94:24:
cb:6d:6e:6c:3e:52:49:98:52:0e:b0:32:80:ff:1a:
d3:97:e0:f9:31:47:54:b1:fa:5b:19:ad:14:cf:79:
98:c9:e4:6d:f2:50:a4:ac:fb:63:4e:a2:76:f0:da:
5d:1e:08:5e:7b:4d:76:41:a7:03:b6:5e:6d:11:d7:
a9:5a:bd:4a:06:26:3a:38:48:70:5f:8b:3a:f5:0b:
f4:1b:76:58:0a:ba:ae:6f:46:d9:da:d3:ca:5c:10:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A4:E2:81:45:C8:E7:32:E7:76:51:40:FF:05:37:57:BA:C2:A6:1F
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:97:f0:64:9e:4f:38:63:84:9c:de:57:b2:0e:1f:40:18:a2:
ce:dc:f1:32:b9:0b:83:60:20:67:85:09:04:f4:cc:de:c1:65:
9c:f7:5d:13:04:14:c3:c4:8e:87:4f:b5:8e:f4:f7:05:7a:5e:
f7:df:32:3a:e0:e7:c2:55:84:4e:4d:65:46:1f:42:78:eb:0f:
aa:7c:37:15:22:5a:77:b1:04:a5:4a:ba:66:12:db:3f:51:99:
e2:ec:82:ad:a2:e9:87:3e:71:73:23:73:61:14:73:76:fb:aa:
94:e7:d2:73:9e:87:51:b1:69:8d:d7:16:81:a1:4a:a7:03:b8:
63:03:ae:14:1f:85:26:da:73:ab:a9:d5:92:82:16:2d:e8:d5:
eb:eb:c4:b5:9c:e3:4e:18:3a:ad:5f:e4:3e:fe:55:27:2b:0b:
d1:be:29:75:56:b3:a1:c3:84:34:b3:84:ab:73:40:91:9a:36:
5a:cd:6f:5f:0c:86:12:cb:56:2d:7b:10:54:d9:2e:e7:7d:84:
54:e5:42:77:f1:cd:10:9b:e8:b8:6d:b3:9c:e2:c3:61:8f:12:
44:fc:aa:6a:e4:a3:6a:5a:c3:75:48:04:bc:42:fc:c4:7d:4a:
33:7c:ee:d2:0b:ac:66:2e:13:d7:99:fa:9a:9a:d8:f9:73:fa:
e8:73:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client