Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: Uu4hGvI76/Iio2XJ0HkZxYi1iGCsHRUKgYKz11S2hb4=
Subject key identifier: 5B:D3:FB:1C:EE:F0:7C:D9:52:C4:3A:00:20:F2:79:3E:7B:48:C3:43
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 0199FD6B189A9CF9F71282A0BD0AB7DB4D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 13F5
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: zR3OLsojtg1mlySCFURYtGYnNpC44gjE9XgQPPYOoyk=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:18:9a:9c:f9:f7:12:82:a0:bd:0a:b7:db:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=5bd3fb1ceef07cd952c43a0020f2793e7b48c343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:c0:48:f8:e5:95:8f:06:6a:78:95:1c:87:
f4:db:fc:50:bf:77:9e:92:45:38:7a:d1:1e:f6:c4:
a3:95:b8:63:5c:2a:13:2e:7d:92:96:a3:fd:9d:88:
a3:a2:a0:49:26:d2:69:be:4d:ba:c8:2c:cc:d9:93:
63:b5:76:d6:d9:c0:46:ac:42:e5:cd:c4:02:72:69:
b8:12:cb:ac:e8:43:74:f1:a3:24:54:05:72:4f:ca:
3b:9a:d8:c8:d9:20:e1:9a:6b:81:a7:12:3d:8b:bc:
f5:53:81:f2:fb:79:c5:75:d8:e2:91:1e:fc:bc:af:
bf:94:2c:e6:21:0c:96:90:3e:9c:b3:7c:80:68:13:
96:5a:4b:4d:c8:cd:90:0b:c8:cd:ad:85:2f:15:d7:
99:60:f7:a7:79:0a:f8:99:3e:e6:ff:7d:71:b0:fc:
dd:83:ae:b6:22:ea:76:5f:75:75:7c:f1:eb:19:9d:
d0:12:5d:63:bf:a7:cd:ed:ff:37:11:ca:7b:55:60:
82:84:9b:5e:78:20:e0:cc:a6:31:b4:0c:aa:cc:ad:
ae:a5:fe:37:b9:87:b4:71:e4:64:05:cd:5e:b8:bb:
d1:b8:13:16:c8:78:8a:01:9b:eb:0c:a7:79:99:6f:
6c:5f:ad:38:fa:a5:6a:49:fb:ad:53:16:93:69:64:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:FB:1C:EE:F0:7C:D9:52:C4:3A:00:20:F2:79:3E:7B:48:C3:43
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:61:7b:d7:69:67:51:27:2d:b0:d0:91:fe:ff:4f:3b:0b:39:
61:e4:5d:df:99:a9:76:bf:a1:a1:41:54:7c:07:b1:e2:9c:38:
8d:ff:b6:9c:a0:21:22:ff:c3:16:c1:26:08:85:b0:94:f4:8f:
3b:2a:60:93:13:b4:af:8d:fc:3a:b2:98:49:bb:1f:f0:10:66:
4e:2f:00:1a:fe:23:46:da:68:98:68:ed:cd:e6:05:c9:76:32:
2b:2a:25:c8:f1:f4:63:bd:90:e8:ab:16:7d:eb:49:9e:db:45:
7c:fa:b4:c9:b0:20:e3:9a:ae:4d:0f:11:77:09:1f:8e:3e:7e:
03:f4:92:0e:54:fa:f0:ce:32:d1:44:00:e9:06:8b:2c:0c:ad:
b0:c9:0a:88:2a:aa:a0:0d:1f:14:a7:c4:86:4d:cc:f1:43:1c:
cd:97:97:30:43:0b:40:71:21:f3:cb:6c:c6:60:12:6b:e0:8b:
33:83:55:b6:1a:e1:4c:c2:92:9f:6c:4a:cf:28:75:37:ce:3d:
97:51:e6:32:34:8e:70:9d:ff:a6:0e:c6:2e:7d:a9:b9:5b:e7:
ec:b4:59:59:5a:b6:bc:4e:0c:5a:26:eb:b4:00:69:f0:a9:a5:
b4:70:36:af:bc:80:eb:5d:06:77:61:fb:61:d2:06:a2:84:86:
ce:66:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:34 2025 by rpki-client