Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: nlJtCOXBM5XaQxt9cu/0ScmhP8QDE3IIeUyIAjl1zKE=
Subject key identifier: 4E:CE:A7:81:3F:25:26:C0:28:AF:70:29:BE:4B:E2:61:5E:E6:C4:AF
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 0199FC5867A286A14FD9087F1EB7A723B1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1683
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: z3M4YTthqbLr6wKpHN3sCohBpDBcLNJEJLfPP+j/IV8=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:67:a2:86:a1:4f:d9:08:7f:1e:b7:a7:23:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=4ecea7813f2526c028af7029be4be2615ee6c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:67:99:e9:df:8a:1d:2a:99:74:1f:aa:b0:
90:d5:8a:26:c7:c3:2d:88:b6:03:45:d3:c1:c6:80:
b6:76:39:5a:39:77:51:66:17:38:0c:46:97:47:d9:
a2:82:b4:f3:ed:6e:cb:c6:24:85:0c:d9:81:92:e2:
1f:1b:f7:e3:d8:95:c0:66:17:d4:ca:a9:6b:40:20:
bd:ea:bd:99:41:8d:aa:a7:51:4d:06:d4:f0:32:c0:
27:24:00:dc:ff:ed:4b:19:5f:2b:14:a8:0e:ca:ca:
03:1f:35:a2:b6:ec:2b:0f:8d:31:80:e0:1c:20:fd:
32:5c:f0:53:fe:28:2a:66:04:45:2b:47:7e:76:ca:
42:ed:8b:07:53:7b:8c:a6:c9:62:7a:13:81:8f:65:
db:e4:74:ce:ab:18:dc:bc:5a:05:74:76:47:52:bc:
a0:77:f3:81:7e:81:a0:3a:27:0d:a1:b8:c6:27:20:
ed:c2:a1:f0:b6:9a:6e:e3:31:fe:60:6e:b2:40:47:
86:38:23:63:bd:4f:75:45:e0:c1:5c:ac:15:a2:74:
93:05:6b:35:1e:9d:5b:77:f3:f3:06:b7:10:da:3a:
64:6d:0a:6b:b7:2c:b5:e2:15:74:db:f4:49:d2:dc:
97:56:48:72:ea:b8:3d:74:2b:f9:73:e0:0d:7d:78:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:A7:81:3F:25:26:C0:28:AF:70:29:BE:4B:E2:61:5E:E6:C4:AF
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:14:52:c4:44:10:64:1f:d3:9d:c6:b6:b4:e8:9a:53:1d:
b6:da:07:8e:ac:f0:a3:ce:29:5f:cd:19:63:06:a6:9d:da:32:
10:df:7c:a4:65:7c:91:f7:f9:07:56:f5:bf:7a:82:cf:f3:37:
9f:6b:30:75:4c:2d:32:ea:4a:fa:30:e7:7d:10:ca:39:d7:a0:
50:38:9b:f8:f6:6d:95:42:be:60:d5:14:38:43:8b:22:26:db:
89:51:2c:7b:cf:e3:80:25:4d:aa:c4:62:a3:4e:25:7e:7e:ea:
ba:8c:ed:c5:80:b6:a0:90:14:32:97:ec:27:c9:75:f8:6d:ce:
39:60:da:ad:36:67:e4:9a:4c:0f:49:03:a4:c6:8e:10:2b:c7:
30:91:4e:bd:42:32:74:e5:e3:80:ef:88:d0:51:3f:79:2b:65:
3d:d3:14:92:88:de:64:56:2e:00:8d:05:40:90:c9:f6:73:4b:
39:89:b8:9d:49:3d:08:80:e4:74:ff:a5:45:72:4d:91:78:63:
14:f5:bd:b1:e2:26:0e:99:3e:0a:1d:72:3f:13:e5:24:c5:78:
b0:16:f0:54:8d:b6:ca:99:8d:f4:3d:4c:ef:23:93:55:9a:41:
f6:47:52:4b:cd:e5:f4:93:c2:9f:77:b1:86:b5:38:a5:f8:13:
c6:5b:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:02 2025 by rpki-client