Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: naS9GF1kn9GRzEAQoVcwM7nWU28h/rJu/Mbllgy/5Og=
Subject key identifier: 77:B7:89:EC:8D:6A:F4:D6:D9:CF:CD:84:FC:40:B3:BE:4B:32:A5:DC
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 0199FE0FE5A9CC3713D68A9E909F4225F6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0D8F
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: pA3ug77QnilouRgtOxDU2Recf954JsruwYaipZUr3Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e5:a9:cc:37:13:d6:8a:9e:90:9f:42:25:f6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=77b789ec8d6af4d6d9cfcd84fc40b3be4b32a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:b5:94:43:a4:82:71:bf:5a:f1:8a:42:3d:
7c:93:73:ea:de:b4:47:56:3c:25:7f:ae:b0:d2:19:
58:2e:40:c4:b9:1f:3d:0f:33:89:a3:d2:f5:e4:ec:
bd:d4:d1:41:72:89:57:f0:d2:f4:0e:97:05:fc:9e:
35:39:a4:f7:a8:71:e1:53:1e:03:c1:6d:0b:bc:7c:
8a:b9:e9:c8:5d:c1:d9:f1:5d:4a:24:f1:58:9f:20:
ea:0b:a1:a6:d6:21:55:7c:23:98:b9:36:09:40:8f:
87:1b:2d:c3:a8:a9:29:10:d3:1c:34:b3:c4:70:87:
6a:5b:ae:c8:74:ae:17:d4:f4:d8:1f:d5:af:5b:fc:
e8:1f:4a:90:04:2a:d9:bb:32:21:b7:16:bf:cc:f0:
42:e6:2a:ad:bc:8c:68:4b:73:63:6d:c3:f4:a8:2d:
09:39:d2:da:de:6c:ab:a7:34:f7:41:65:7c:3b:e6:
ca:0c:72:a3:84:e4:e7:a6:52:81:5d:61:9b:eb:c1:
96:ef:e8:81:15:7e:1a:db:a1:b4:65:5a:d6:7c:0d:
3d:5c:17:bd:6b:d2:ff:1d:27:b4:76:3a:cd:4a:18:
fb:21:00:d1:7e:59:2a:1a:7e:c5:90:9c:1a:99:8b:
72:71:d6:e5:2e:50:95:6b:0b:8f:9f:22:3f:49:59:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B7:89:EC:8D:6A:F4:D6:D9:CF:CD:84:FC:40:B3:BE:4B:32:A5:DC
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b6:8e:7c:97:c1:1e:7f:74:5d:d5:a9:13:76:3c:af:7e:e4:
ca:8f:53:4c:ad:41:46:6b:5b:6b:6d:c5:85:ca:2b:63:87:9d:
aa:84:e8:dd:5e:79:4e:cd:2e:8c:8f:31:5f:73:cb:3e:c8:05:
fd:c3:2a:bc:88:43:de:f1:3c:d8:13:45:83:ae:95:1f:43:41:
d2:d5:0d:c9:8f:c4:ae:72:79:39:3b:d2:88:98:ee:aa:36:d0:
07:a3:ae:6d:92:bd:7d:41:28:c2:e8:5a:29:c3:cf:c2:40:b5:
79:5d:2b:1d:14:40:dd:25:ed:b7:92:62:f5:e5:c0:88:66:ce:
67:61:3f:b5:e8:a5:7e:c3:32:cd:2c:46:ed:5d:98:6b:99:32:
a5:82:21:bf:27:2d:de:b7:76:a3:7a:0e:95:bd:01:33:3d:17:
d9:79:be:e3:fd:4d:94:61:be:40:78:42:d9:ac:c1:4f:9d:c1:
a5:67:05:d1:e9:2e:fb:d2:ea:fb:8b:26:dc:32:3c:18:f3:69:
f2:66:6c:3f:85:73:0b:1a:26:b2:a3:9c:a2:23:30:4a:29:bc:
33:d2:ed:60:42:a2:37:fa:de:52:5b:87:32:46:5d:9b:fe:f4:
80:06:89:96:5b:8c:b9:58:5f:06:f2:88:02:e1:44:61:02:83:
6b:92:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:49 2025 by rpki-client