Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: OP6hMeynE4VOEHZEKeW0rrGZXNlCYSmbFhnDnG8eZ2o=
Subject key identifier: 6E:2F:DA:D6:27:2E:D6:7E:07:8D:EE:34:E5:53:C7:80:83:19:FB:06
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0199FE475B5FA93656C2BD07373BA411417A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 0963
Signing time: Sun 19 Oct 2025 21:01:53 +0000
Manifest this update: Sun 19 Oct 2025 21:01:53 +0000
Manifest next update: Mon 20 Oct 2025 21:01:53 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: a15t2oD10NkIe7xqDiZ8x09PMfL/lQbCL9EXTjEF9zs=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:5b:5f:a9:36:56:c2:bd:07:37:3b:a4:11:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Oct 19 21:01:53 2025 GMT
Not After : Oct 20 21:01:53 2025 GMT
Subject: CN=6e2fdad6272ed67e078dee34e553c7808319fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:bc:8a:cc:b1:35:64:29:c8:74:be:09:68:
83:93:49:f1:19:45:ed:8c:34:fb:0c:1b:7b:2c:9e:
d6:69:18:a6:79:d4:fb:40:58:24:77:76:d7:b7:76:
ec:81:73:1e:6e:f5:14:c5:80:2a:d6:77:39:51:81:
ca:fb:78:e3:63:37:e6:62:e0:2e:2b:48:29:b6:7e:
14:2e:56:51:32:ac:76:00:b6:33:85:62:48:ed:13:
36:3b:e0:43:a7:04:ce:6a:de:e1:74:e5:ce:a9:fb:
ab:c7:40:66:24:87:58:87:42:18:0a:b3:18:e9:52:
86:83:a0:35:cf:e1:f3:51:8c:95:00:13:15:fc:83:
41:32:50:12:9f:45:6c:4f:6f:8b:36:09:84:96:a0:
67:b9:5d:60:29:aa:5a:91:11:a6:7e:55:02:b9:95:
66:77:1c:6f:35:ac:44:8f:bd:18:34:c7:65:dc:15:
80:69:0d:36:3b:42:3d:19:16:c5:1e:f7:4d:03:85:
69:de:c9:f3:bd:3a:3b:97:cb:79:06:60:15:6f:11:
ff:76:ec:8f:c7:29:d5:57:5b:10:9c:a9:48:a7:59:
10:fe:33:27:72:db:84:f4:dd:b6:cc:da:e4:be:9c:
a9:f4:8c:c5:b7:f2:39:de:c2:0f:30:f6:fc:67:67:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:DA:D6:27:2E:D6:7E:07:8D:EE:34:E5:53:C7:80:83:19:FB:06
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:93:e6:e6:e8:15:82:c0:d7:43:0f:a9:86:c3:78:5e:f2:
60:df:ff:2c:5f:f5:ff:ed:76:27:f3:a4:90:4c:ed:48:a5:c7:
bd:10:fe:a1:85:d1:47:70:1f:b8:7a:6e:76:a8:73:23:06:2f:
14:82:e3:2e:30:29:d0:d6:80:3d:44:40:b1:2b:e3:95:0b:c9:
cd:ba:57:b7:8f:59:84:27:07:d3:52:1c:29:73:4e:75:87:7f:
63:94:93:f5:a8:f3:aa:83:65:71:e7:b8:85:f0:d1:e8:f7:3f:
e5:fb:c3:6e:91:bc:d3:a5:24:eb:5c:58:4b:4d:f7:0a:b5:07:
9b:dd:51:e6:ed:f5:ab:1d:28:0c:2a:d6:5e:23:5c:28:46:8f:
c2:3e:90:4a:01:d7:a6:2a:3d:5f:52:7b:35:49:7f:7d:02:24:
f6:2a:f7:2d:2b:04:9f:ca:82:1c:95:41:03:5c:d2:66:3c:ae:
49:e1:e4:1a:61:e6:27:c3:20:20:fd:07:ff:47:3d:57:01:fc:
49:e4:62:aa:fa:0e:9e:e4:e2:6f:eb:5f:c3:1b:61:d9:de:18:
e1:5e:29:3e:40:40:fa:21:d3:b9:8f:4a:d6:e2:16:51:1f:a1:
b2:ca:e7:fc:76:d9:64:ca:ed:1b:d9:fb:10:6f:f9:fe:79:a6:
39:47:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:32 2025 by rpki-client