Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: JUwhlSQwO+MO89/16gQ2B2Fl7JHkryBEYeOTlmyj5kE=
Subject key identifier: 2B:DB:38:4D:6B:8E:B6:E6:C1:74:59:69:07:11:22:11:9B:2A:1F:AB
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019A7149DAE59335BA6A0727E090A3F7349D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0B8B
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: AZAyyvRMO2DLtIR7a8lT0OIXDm8JFEMas23AGUq2JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:da:e5:93:35:ba:6a:07:27:e0:90:a3:f7:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=2bdb384d6b8eb6e6c1745969071122119b2a1fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:59:f4:16:fe:02:db:ab:9a:56:62:62:bb:
4e:97:cf:ff:5a:9d:6e:c8:b0:13:0c:e8:73:ae:ac:
0a:a5:ed:12:d7:6e:c3:f4:7f:dc:51:1c:60:d8:f9:
6e:61:a1:f4:a3:d5:7c:c4:3b:b3:63:07:94:94:79:
2f:05:17:70:71:de:97:52:29:47:06:97:d2:14:71:
3f:06:fa:2b:d8:6b:f7:b1:1a:76:43:62:16:77:df:
c7:08:de:77:b8:fe:47:81:ac:85:67:60:70:a7:02:
78:c2:b9:bc:63:13:b7:e5:ca:37:e4:dc:17:cb:ac:
38:30:ac:46:02:06:ee:6c:24:96:bc:e6:4f:15:5b:
a2:1f:fb:52:3f:87:41:e9:49:00:76:6f:8b:0d:96:
35:bb:f3:90:e3:10:5a:7b:eb:b0:e8:44:fc:64:78:
32:5c:9a:d2:09:d7:57:43:64:f7:07:54:ae:9a:fc:
14:31:09:00:75:18:5c:f9:a7:52:9a:04:f4:39:3e:
85:ae:05:a2:0b:a0:9c:fb:59:09:52:c7:7e:bd:2e:
d6:5c:a9:66:99:c6:45:ba:47:5a:5a:7b:a2:5e:7f:
cf:b5:dc:52:eb:a9:9d:e1:69:86:c6:18:92:a3:46:
2b:85:5b:42:56:c5:13:c2:fa:ba:0c:d1:7a:67:e7:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:38:4D:6B:8E:B6:E6:C1:74:59:69:07:11:22:11:9B:2A:1F:AB
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:49:cd:b5:01:4c:1d:e3:8e:cb:c6:2f:7d:7c:f2:55:98:
d9:e7:da:86:77:5a:1a:91:df:f4:79:4a:c1:33:6d:53:2f:2d:
9c:25:82:57:fb:ae:64:18:7d:dd:4a:58:57:89:c6:8b:17:39:
f4:6a:c2:0d:b2:18:4f:4b:02:c8:af:c4:01:a7:86:8f:d5:78:
3d:da:d3:be:1d:25:d4:cf:53:99:80:28:45:40:7d:cf:62:d1:
3b:5d:b7:94:65:8b:12:8d:c0:8a:2c:e6:3a:05:80:71:54:ea:
98:51:c8:87:97:a3:02:ca:39:27:7a:76:ad:6f:12:f5:9d:dc:
f1:69:45:96:01:57:1e:82:95:41:d8:c3:57:4d:16:45:ca:ca:
f6:2b:bb:fa:0c:d4:4e:4c:42:f9:bc:30:c0:20:af:21:30:14:
7e:d3:2b:33:03:0b:27:77:67:a5:d3:10:d5:52:79:8c:2b:9f:
f1:d6:0f:5b:cd:d7:c8:be:0a:38:dc:8d:e6:c3:f5:71:e1:8c:
fa:61:49:d1:50:a4:ca:b7:5f:64:37:22:5d:54:bf:a7:6c:ab:
13:b0:8b:0b:9e:f6:42:f6:37:57:d4:d6:c8:d4:fb:32:fb:22:
e1:79:a6:b8:cb:0d:00:88:69:bc:43:59:7a:66:f3:3c:7d:4c:
35:78:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:17 2025 by rpki-client