Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: k28/DZ4l4el4/tge0tH9fWYxxH9DBQgXFluy1AN/m3M=
Subject key identifier: F7:CC:0E:DB:AA:DE:8E:62:88:17:81:E3:C5:CE:D2:8B:2E:8B:55:AC
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 0199FDA1BDB8789A5BDA15750AB4BCA2E04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 016E
Signing time: Sun 19 Oct 2025 18:00:59 +0000
Manifest this update: Sun 19 Oct 2025 18:00:59 +0000
Manifest next update: Mon 20 Oct 2025 18:00:59 +0000
Files and hashes: 1: gpSFuAfs-49fboUul0as1hNOe7s.roa (hash: a1c1k2V4AvypPkcspZ9MdLob1wApcJ4k2MzGZWzvoow=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: SjSyBNMIuSSrWHfDuYd9rNQSboSO8f2EOaWPvERVqrY=)
3: vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa (hash: keZjBn73pIW4PKlhodbog2eBUEbjStbSn55ErmksOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:bd:b8:78:9a:5b:da:15:75:0a:b4:bc:a2:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 19 18:00:59 2025 GMT
Not After : Oct 20 18:00:59 2025 GMT
Subject: CN=f7cc0edbaade8e62881781e3c5ced28b2e8b55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:62:90:55:68:25:dd:d7:98:2b:62:10:42:
27:6e:a2:5c:ca:4b:a2:fa:15:43:10:55:0f:5d:ec:
c1:8e:5d:35:f9:01:a4:a8:14:51:e4:71:a7:79:b4:
21:f5:bc:b2:77:ef:56:9b:4f:0d:83:d9:00:07:12:
14:45:cd:5a:e3:e9:cc:41:d9:9f:e3:01:89:71:ae:
2b:4d:81:1d:36:5d:7e:a7:ac:1d:71:22:bf:a2:a9:
7b:7e:75:b5:27:3d:21:e5:2f:5d:84:77:64:e6:8f:
52:d2:96:a6:85:9f:12:2a:34:d1:8e:16:1d:c6:0b:
da:e6:8f:89:43:8a:12:b3:64:4c:ab:bb:a8:87:8e:
36:9b:33:41:99:bb:24:a2:43:bc:60:a3:4f:bb:17:
c8:62:6b:f2:cc:a2:60:46:c1:c7:05:3b:d5:43:71:
2c:56:89:41:49:79:0d:b3:d6:95:84:20:dd:95:c7:
ea:ce:92:75:43:d6:47:98:7a:ef:3f:6a:fe:43:9e:
d5:6f:54:2e:5c:a4:4b:a8:6f:71:0a:84:0e:01:68:
ff:2b:05:01:de:df:d0:de:ee:dc:78:96:32:6e:3c:
c4:f0:e9:50:84:d8:a5:74:3d:96:c2:71:99:6b:b4:
12:4a:7d:af:f4:fe:f8:e4:33:74:6d:12:38:84:f7:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:0E:DB:AA:DE:8E:62:88:17:81:E3:C5:CE:D2:8B:2E:8B:55:AC
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:6f:c8:7a:d7:c3:9e:47:91:3c:31:da:13:d6:41:a7:0f:
45:14:7c:ed:99:3a:08:08:dc:a6:05:07:ef:d0:2e:ba:1c:46:
b8:22:5a:17:03:f6:af:5a:68:56:b3:d5:4a:7c:cb:6f:1d:a2:
f0:0b:21:6f:0d:f2:7f:ab:f3:7d:8b:6a:26:fa:41:e6:68:24:
1f:76:a5:11:b0:82:00:0d:48:49:9a:33:4a:dd:d7:4d:f3:b2:
d7:66:02:f8:bb:39:3a:db:c9:4b:fc:21:f6:b6:13:68:44:21:
0f:b5:1b:4f:6c:89:b1:d3:5a:40:28:75:fb:0e:10:4a:c1:46:
1d:1b:9e:2c:b0:f5:72:39:3e:14:bb:48:1a:4a:b8:e5:ef:12:
e6:08:71:69:6e:47:62:cc:06:15:82:b0:cb:d9:4b:17:8f:b8:
35:9b:29:d9:56:ad:ad:7b:ee:38:6e:c5:4c:b1:80:d0:96:a3:
4c:1c:2e:ed:91:52:9c:7c:c7:96:a8:8f:4d:62:63:17:a6:bd:
93:3f:66:00:e3:ac:b0:28:7d:3e:66:6b:5f:15:7d:fa:58:d8:
41:9f:4c:74:7b:9d:10:36:6a:38:9f:88:89:b0:1b:a0:b6:d2:
39:8c:2c:d2:3f:e0:87:44:06:31:91:c7:1e:71:e3:bf:c0:fd:
77:df:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:53 2025 by rpki-client