Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: uX9SWIam7uQYx0Yx79TGoIBQcyKa65fuOiWleUNIy9s=
Subject key identifier: 2B:AD:92:16:89:6B:B4:F2:65:09:BC:45:88:78:39:13:E0:7F:90:B3
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 0199FD3489F0C6F1FAA81DAC3AEE90AD8D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: 95U81UzW5kj491wdDaxfDL4XchrOTCeOTJXO6J0F7y4=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:89:f0:c6:f1:fa:a8:1d:ac:3a:ee:90:ad:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=2bad9216896bb4f26509bc4588783913e07f90b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:a2:6c:85:5a:7b:dd:86:10:78:89:72:64:
1c:60:c5:59:77:94:65:06:bd:ec:5d:a5:3a:88:7c:
28:d7:fe:b5:3d:ab:2d:d5:d8:8a:a8:fe:08:8c:4d:
47:27:b7:eb:d4:b3:ab:c3:13:40:90:f8:1c:bf:5d:
88:6a:7a:60:5f:b3:40:dc:19:d8:b3:90:da:76:52:
b7:3a:6e:6f:12:cc:18:eb:34:ae:c0:3f:b2:67:67:
31:44:e6:c6:10:19:67:5f:78:18:81:2f:a6:fa:e8:
7d:27:07:3b:b9:56:ed:46:b7:0a:3c:9d:57:64:fb:
d7:00:e4:24:0c:de:2f:b6:0c:c7:7c:3c:15:b7:dd:
bc:50:aa:7e:f4:59:e8:79:7d:33:e2:b1:a5:37:04:
68:be:4d:43:ea:2b:fe:01:ca:5e:61:86:ce:15:bd:
a5:36:23:62:7e:c9:bc:b2:2e:f7:36:ac:08:c5:92:
ec:8e:84:ae:f3:d9:8b:79:93:91:9c:db:37:9d:00:
9e:75:53:fa:3a:bf:68:c0:94:d2:de:c7:25:21:bc:
d2:d1:f4:4f:5b:bb:14:a7:b1:9a:0d:86:f2:36:c6:
fa:be:0a:98:cf:69:de:52:d9:8a:1e:db:af:ad:e2:
9f:82:1f:96:a0:b1:d4:b3:d2:2b:b3:46:dd:ea:6d:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:92:16:89:6B:B4:F2:65:09:BC:45:88:78:39:13:E0:7F:90:B3
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:59:83:53:15:64:e0:13:6a:33:53:f1:27:b0:1c:3c:48:7e:
42:c5:df:4a:de:c3:0a:ae:7e:aa:fb:15:76:75:c0:14:8d:82:
8d:be:f9:02:89:17:df:45:f3:16:15:5f:25:56:17:56:8e:d4:
88:b8:b5:8b:0d:5c:20:ad:a7:9d:d9:76:92:37:7c:19:d6:44:
2b:fe:65:dc:ba:f6:92:47:d4:62:05:31:37:b4:34:98:8a:1a:
de:d4:bb:b0:b1:e8:a4:88:e6:4b:54:13:e2:7f:ab:38:2c:a5:
d5:d8:4e:a5:0d:81:40:fc:3e:dd:59:84:77:58:d5:35:fd:fb:
92:3e:eb:a9:7b:df:03:de:2c:b8:c8:2b:d8:9b:08:3c:db:bb:
40:40:9e:e2:b6:16:73:51:dc:2e:f8:57:f3:b5:cb:78:51:f4:
57:b8:3e:3f:db:ca:48:84:11:3e:0a:13:18:d2:d8:e5:a5:c4:
04:d5:96:79:44:24:f4:9d:61:f7:ec:6b:e5:75:d5:1a:37:9f:
f0:33:fe:9d:91:ed:d2:6d:16:fb:5e:36:1a:a5:dd:19:da:f8:
ae:31:69:a2:42:49:08:47:38:8f:0a:7c:ce:3e:fb:da:58:ed:
46:93:02:25:8f:89:9e:d7:4c:f4:01:14:25:fc:fd:b2:6f:40:
a5:cc:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:05 2025 by rpki-client