Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: 6xYGWUE5JQBN74qo7g/JWIFe2qZs96Y9iXU7G13HoeI=
Subject key identifier: 93:D1:D7:39:A7:51:2D:04:D9:CA:13:68:9D:4A:61:30:FE:1A:1A:52
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 0199FFC8B9A4DEBC71AAE4AFBB8CAD6093F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: y8UM4WOoAttScUDNoAIDS9IGWN8Ghbvf02CiuocW7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b9:a4:de:bc:71:aa:e4:af:bb:8c:ad:60:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=93d1d739a7512d04d9ca13689d4a6130fe1a1a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:1e:dc:81:75:42:f3:f7:1a:26:fc:27:df:
24:3f:c2:12:a6:d0:a3:fa:74:c3:ac:8e:f5:71:52:
de:66:9b:5b:e5:5d:c2:a1:23:69:f6:e1:c4:ed:4b:
73:e8:9e:30:4f:c3:07:e8:63:cf:cd:75:70:54:6a:
36:7b:9d:0a:05:1f:69:22:6c:c6:a0:7b:d1:86:fe:
50:2c:be:87:2f:d5:20:92:dc:e9:ac:f0:71:0b:9f:
29:70:c2:be:3d:0c:aa:19:6b:ce:24:9d:85:89:fd:
1c:f1:93:ab:de:4e:8c:74:19:31:13:61:45:9a:a3:
2b:ee:57:70:cc:9f:4b:38:86:7c:8e:69:4c:17:36:
61:2c:06:1c:4b:89:45:b1:26:3e:e5:bb:78:0e:12:
59:e3:c7:2d:ab:a6:67:24:49:0c:2c:75:c8:66:69:
bb:58:09:0b:90:b1:81:7f:8d:68:04:44:73:87:d2:
81:34:62:e6:74:4c:3e:da:46:e3:64:b1:a3:57:33:
08:28:f1:22:98:5a:4a:f1:7b:55:5e:c2:af:dd:f5:
42:ef:3c:f8:c5:4c:78:e0:ea:08:f4:66:c4:d2:4a:
6e:94:e4:6b:97:2d:96:16:a4:41:52:a1:f6:44:14:
37:78:70:bb:08:2b:b4:03:d8:6c:e0:55:90:d0:8f:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:D7:39:A7:51:2D:04:D9:CA:13:68:9D:4A:61:30:FE:1A:1A:52
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:83:ce:de:fd:97:5c:c9:7c:f6:fc:29:3e:51:39:61:53:
ff:fc:cb:57:61:aa:d6:e3:78:1e:0b:a5:d0:df:a3:30:67:58:
25:73:e7:ce:0d:9d:99:d0:2d:dc:b3:2e:a2:67:51:54:01:6b:
3d:21:3b:90:68:d0:8b:b3:47:f4:4a:f9:03:d1:30:87:32:d7:
64:7d:e4:4b:22:9b:8d:bb:16:9a:ea:20:e7:17:90:25:12:74:
08:3f:20:a4:02:ef:ca:34:35:d8:7a:c9:08:ab:f9:e0:41:4b:
26:54:72:0b:64:cc:77:cf:f2:83:a1:d0:42:d7:de:d4:88:85:
ee:1f:ff:33:b4:ba:43:9c:a3:70:76:32:23:1a:10:94:9c:bd:
8b:66:1d:b0:5a:0e:28:f8:1e:c4:d3:5b:11:88:f0:53:84:6e:
47:54:a6:67:a6:b7:4f:da:e3:1f:e3:9a:33:5b:0f:d6:fb:fc:
08:41:5e:71:ee:12:a2:31:0d:23:b6:47:7e:42:12:90:28:ea:
0c:01:0f:12:25:d7:54:86:cf:9a:e4:f9:32:50:67:58:e1:39:
6c:b0:45:38:c3:0b:29:5e:56:ca:0e:c9:5f:d8:5b:6a:a0:2e:
1e:69:3f:fe:f2:d8:d9:21:37:59:df:58:df:67:46:d9:52:d1:
36:48:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:33 2025 by rpki-client