
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: BTFTo35Q9HILkIodCq8F6OFzwJXyE6hZkhj6ybswLxE=
Subject key identifier: EF:1B:B9:0D:A3:F7:5C:19:09:96:DA:3F:5D:A7:43:FB:A6:F5:F6:0D
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 0199FB45F941612BDF482B2775A6ACB3BA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: /pHF2jYJSkwW+4VG1pJiaWjbv/IUoMtJFbazu8KcjYM=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f9:41:61:2b:df:48:2b:27:75:a6:ac:b3:ba:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=ef1bb90da3f75c190996da3f5da743fba6f5f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:c8:15:96:c1:a1:86:de:32:a8:1e:88:33:
fd:5d:7d:55:5c:94:b6:9c:e4:ad:5c:c3:e7:aa:9c:
f0:45:9f:d6:46:60:78:45:5b:3f:40:84:92:c3:cd:
31:15:0a:88:46:30:d8:91:fd:a5:8d:ca:c8:fd:4a:
f9:43:2f:a6:a1:90:c8:95:5f:ff:5f:6f:7e:77:46:
45:5b:a5:4e:ae:17:2f:a9:62:d1:67:94:2a:34:ad:
70:99:b7:0c:00:ce:21:f5:f1:65:b6:69:cd:3f:49:
c2:19:fd:7b:e2:e7:ff:52:48:64:7f:3a:3a:f2:3f:
08:56:03:93:d6:fd:16:3a:ce:e2:8c:8d:50:d2:23:
34:43:6d:76:a5:d3:8c:e4:85:51:51:01:2b:6d:63:
76:bb:53:8d:d1:66:38:39:24:f8:6d:a0:d9:c0:b8:
93:6e:86:89:39:4a:aa:1f:fb:3a:c8:76:81:e4:2a:
07:96:b1:02:0f:e9:4e:9a:92:74:46:63:47:71:e5:
14:03:f5:bd:04:41:29:4f:f4:9d:40:00:5b:78:5f:
82:36:aa:6a:bf:12:08:5a:bf:79:99:07:3c:58:3e:
d0:5a:5e:52:11:ef:a8:92:b6:55:33:2e:71:30:8a:
74:e6:22:a5:7a:06:21:70:fa:96:15:70:98:3a:5f:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:B9:0D:A3:F7:5C:19:09:96:DA:3F:5D:A7:43:FB:A6:F5:F6:0D
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9b:06:e4:40:04:cd:dd:c3:8a:57:c1:8d:16:ff:54:9a:74:
32:c5:b0:70:23:b8:00:3d:48:a5:df:cc:13:15:7b:55:de:e2:
7c:4c:cc:84:fd:cb:ec:8b:39:1a:c5:4c:6c:e1:7b:b8:ee:f4:
19:f7:b8:b1:a7:82:59:2c:e9:30:58:0a:c9:e1:d7:37:00:87:
9a:b5:dd:d3:89:88:87:e2:d1:0b:1b:fa:a6:10:54:6c:e4:cb:
e8:92:93:1f:fa:a1:ab:b4:fa:2b:e7:83:20:28:60:7f:c5:b2:
5c:ce:4a:7a:8b:93:e0:60:8e:6b:7d:dc:b3:f0:d6:c6:3f:30:
0b:c6:8c:44:36:e9:af:bb:b5:60:87:75:ab:65:fb:6c:f3:6e:
68:da:3c:bb:5f:20:03:e7:a3:18:eb:42:e7:4a:7f:a4:75:58:
11:af:21:00:47:3c:17:ba:7d:07:5a:ae:82:55:b4:ff:8d:f8:
8e:1b:47:fe:d7:1d:56:c0:94:fa:2b:aa:08:cb:c1:f1:f0:80:
c8:c3:86:27:26:97:b9:ff:09:10:f9:f4:3a:05:30:4c:fb:05:
64:d6:9b:55:de:70:a6:66:9d:8a:49:ab:5a:8e:67:25:35:44:
78:07:23:f2:62:38:76:ee:a6:30:e5:ee:d1:bc:58:7c:c4:ce:
6f:c1:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:14 2025 by rpki-client