
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: EmU+X06LSEu7T/E6Y0IPcsZI4/dWoJici5Z2RTtRjx4=
Subject key identifier: AD:55:36:2C:4D:BA:1C:C5:0D:18:84:CC:F4:5D:AC:15:E8:E6:1B:F9
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 0199FBEBEA4A7C9A8A1ED844A8C4A3CD5800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 16A4
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: J8QlNNqSYLuNF208pr7dklRjS3jqVEbsx4MuIeYwyKI=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ea:4a:7c:9a:8a:1e:d8:44:a8:c4:a3:cd:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=ad55362c4dba1cc50d1884ccf45dac15e8e61bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:f3:b8:83:6e:82:7e:a1:36:aa:e3:20:05:
45:77:2a:a1:11:63:79:46:c8:91:ec:00:3b:a1:af:
ba:a4:3e:19:a7:29:19:cd:3d:eb:a7:6f:a3:57:46:
4b:8b:7f:71:82:de:9d:a4:b6:c1:85:60:57:ce:a0:
1c:c1:c3:ea:77:3e:81:c2:b3:2a:0f:6c:80:e3:a7:
00:9b:61:a1:f4:06:da:f6:25:c1:33:ea:36:f7:27:
a7:8c:49:62:83:b1:c6:cd:60:de:ea:98:80:a5:a9:
76:e1:96:0e:69:f8:1d:71:d5:5b:c1:fb:b8:7a:cb:
df:04:e4:2f:f9:92:c4:07:87:e6:c0:4a:c0:3f:24:
da:b9:e5:7d:63:ea:81:ab:53:46:2d:21:af:fa:73:
36:27:1c:2f:1f:66:3a:05:a7:59:4d:03:26:15:b2:
fb:d9:10:17:28:4a:6a:db:19:bf:02:94:4c:ff:53:
1c:7c:01:10:b9:43:0f:cb:ac:82:99:b9:0e:15:6c:
b7:ec:27:e5:73:cd:1a:b2:4c:f0:70:69:5b:aa:9c:
1b:81:db:cc:75:01:1b:11:79:09:6b:1a:41:18:90:
91:7f:25:50:38:8b:d0:80:fb:38:8d:8f:9f:92:20:
2b:68:ad:66:4e:78:b0:64:32:d6:53:ba:a4:60:d7:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:36:2C:4D:BA:1C:C5:0D:18:84:CC:F4:5D:AC:15:E8:E6:1B:F9
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:91:09:ae:aa:83:5d:99:b0:1a:bc:85:e0:22:71:a2:ab:7a:
40:96:a8:39:1e:8d:8b:9d:6e:dd:2c:12:26:7a:58:f5:83:c0:
2f:06:b4:80:21:6e:f7:8a:42:5e:a7:37:04:ac:4c:35:c9:4a:
ff:2e:2a:f1:c8:cd:95:74:e8:c4:5d:c1:4e:48:31:6f:8d:39:
81:3d:38:05:6e:86:c8:17:5a:bd:db:59:98:83:50:90:13:b9:
66:80:e4:bd:60:6e:8a:0a:c3:b8:7a:6e:e7:76:07:1d:c1:a9:
43:28:a4:0c:86:81:cb:4b:e2:14:e0:39:0d:cb:36:9b:45:dc:
84:89:18:94:1c:45:b8:cd:59:9d:c6:84:ac:75:51:79:0c:11:
6e:c0:a6:71:13:55:38:96:25:d2:92:27:90:1a:5a:14:80:51:
cc:41:20:75:15:fe:3a:6a:4f:01:cf:ca:02:5c:a5:8d:f2:e4:
90:c6:c2:bb:b2:7d:d1:9c:53:82:19:2a:47:97:d3:12:cc:ea:
2a:15:76:5c:04:da:2b:90:69:64:c6:a3:77:4c:58:81:9d:0d:
e8:c3:ba:48:32:e0:45:37:da:45:18:37:9b:75:19:eb:86:20:
06:34:d6:f8:83:19:dd:a2:6d:5c:0c:5d:7b:0c:c6:e2:c7:b3:
88:a2:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:33 2025 by rpki-client