Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: nKoRv1q9qK6IZUrphgKmP5R0yxAHAoze7SxJwzOU0Gc=
Subject key identifier: 3D:15:4B:B0:0E:AE:46:3D:D2:EB:AA:9B:CC:32:8E:6F:DF:EB:BB:8C
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019A424B643A96B862455038D6B4123C5E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1705
Signing time: Sun 02 Nov 2025 02:00:28 +0000
Manifest this update: Sun 02 Nov 2025 02:00:28 +0000
Manifest next update: Mon 03 Nov 2025 02:00:28 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: HriyTK/N7KzZIACmenlKZY1jnjKLZthvSDPvGTe75m4=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:4b:64:3a:96:b8:62:45:50:38:d6:b4:12:3c:5e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Nov 2 02:00:28 2025 GMT
Not After : Nov 3 02:00:28 2025 GMT
Subject: CN=3d154bb00eae463dd2ebaa9bcc328e6fdfebbb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:e6:f6:0d:34:cd:df:2e:57:65:ed:cd:bf:
59:55:20:07:66:67:dd:96:ee:bf:ef:91:64:d1:6b:
08:f3:57:7b:15:2d:d6:66:60:d7:a2:a3:e0:97:27:
20:3c:7e:58:31:44:d0:e8:65:0d:a4:e1:5b:7a:48:
00:36:3d:5f:06:76:14:33:b1:89:68:d5:64:ee:4b:
19:18:59:02:1e:3c:16:72:76:ab:f9:15:4a:84:c8:
8c:9e:cf:8e:4d:7e:a3:9d:17:79:93:59:82:cd:6d:
29:8c:bf:d2:05:b8:9c:ed:60:39:58:75:c3:67:36:
8c:0f:c1:26:ae:22:2d:92:df:d0:6e:9d:f7:6a:a2:
e5:82:45:91:06:57:25:13:b2:c7:7d:ae:5a:59:66:
5b:36:72:24:e4:6c:50:2e:26:f5:d9:93:41:05:52:
01:b1:f2:e7:48:71:87:3a:ca:03:75:ed:eb:21:18:
83:53:09:31:c8:60:ab:24:26:b2:c5:6c:8b:71:bf:
f6:b6:85:0c:16:9e:4d:d9:16:16:78:cc:b7:93:7d:
ca:43:f4:f6:53:3e:29:b4:b5:05:6e:5e:67:ae:c5:
5f:c4:52:e7:b6:53:5a:c9:2d:dc:6a:6c:0e:ef:2a:
d9:8a:02:f5:d0:e0:f7:f8:db:a8:52:01:09:2c:c0:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:4B:B0:0E:AE:46:3D:D2:EB:AA:9B:CC:32:8E:6F:DF:EB:BB:8C
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:bd:83:02:07:22:6a:3e:5a:cb:44:82:a4:2a:72:af:54:
ef:a6:91:40:75:4d:bc:3c:7c:dd:50:33:df:77:9e:b1:78:87:
dc:ed:9e:4d:77:53:1d:fe:cb:21:79:93:b8:a8:fd:19:12:79:
24:79:94:32:30:b1:96:5e:42:e4:7d:ac:63:28:d9:93:7b:e8:
06:4e:52:99:59:c1:2d:8e:04:5e:8b:83:de:79:ed:0b:2b:4c:
ef:a4:6a:9c:af:8e:4f:4f:4e:e0:50:20:95:b0:8b:e3:ef:71:
3e:83:e2:27:72:af:13:9e:a6:ff:41:8e:b3:65:4d:99:f3:56:
86:60:bc:ab:35:ae:6f:a0:63:ee:27:15:d8:fa:46:ae:84:08:
99:09:6a:20:9b:4a:d9:41:6c:17:b8:3a:66:8d:78:f3:91:df:
02:c4:21:2c:10:a3:1a:87:aa:7c:65:7a:4f:bd:08:0e:10:45:
bc:c2:f7:30:3b:fe:81:ec:7b:fc:88:7a:87:fe:ac:cf:cf:8a:
87:ac:7f:ff:49:9f:c9:ba:e2:ef:a4:14:c2:35:76:3a:c8:d6:
42:58:80:6e:2d:c6:46:e0:8d:86:b0:92:4f:aa:8f:f2:8e:90:
e6:63:9b:a2:91:8f:04:86:5e:1c:17:73:80:26:88:f0:00:7a:
7f:e6:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:35:29 2025 by rpki-client