Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: DrQ/sEfcQYcZ7fqnRjlIAeapUug/lrSXjNn7s0j1Aq4=
Subject key identifier: 07:EB:65:9C:C2:0B:B3:26:AF:DE:26:70:39:14:D2:0B:20:1B:84:2E
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0199FBEAD105FF85F4716DB0AB728FB92FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 027C
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 8YlANozgp3Xn4hPBCZX9+PnLzzXaiK7r+3Y9CEw6DnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d1:05:ff:85:f4:71:6d:b0:ab:72:8f:b9:2f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=07eb659cc20bb326afde26703914d20b201b842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:1c:9f:69:8e:94:22:6d:30:f9:ae:f1:24:
e0:07:02:65:5f:f8:f8:71:44:42:57:57:90:1c:b6:
a7:10:b5:e9:d4:59:ef:46:61:ec:6a:c2:9f:f6:9a:
3f:9e:5c:ee:71:10:af:2f:9d:33:2c:6c:cd:2b:4d:
65:70:65:1f:b3:f3:31:50:12:51:e8:1f:2b:e3:e2:
fd:30:e8:44:28:0f:b9:f0:56:1d:b7:99:d8:36:df:
25:19:ce:85:d4:c0:e7:58:47:9a:8c:7b:b8:65:f2:
fa:d5:f4:fc:ca:0a:5f:75:91:63:aa:01:d1:6c:a8:
d0:76:93:42:50:3a:03:d6:f9:b8:76:f8:c7:62:60:
72:17:9a:55:7e:35:79:dc:ab:39:35:5d:e5:1f:af:
82:ce:45:e5:7e:fb:73:d0:74:0c:10:22:88:21:bb:
3c:06:02:0e:04:b8:be:46:72:7e:a1:4c:f3:e4:d0:
91:2e:5c:57:5c:73:01:8b:3c:eb:ae:2e:0c:bf:69:
2d:00:06:4b:09:9f:10:30:c0:42:9d:67:98:9c:06:
ed:2b:58:ea:b7:16:f6:6d:a4:b4:58:8a:0e:9e:45:
bf:1c:ae:50:fa:03:97:39:60:3a:17:45:59:28:19:
ca:13:e0:b6:8b:6d:80:bc:3a:c6:9a:d6:ac:28:f2:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:65:9C:C2:0B:B3:26:AF:DE:26:70:39:14:D2:0B:20:1B:84:2E
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:c0:8c:73:df:6f:4b:f5:50:43:34:09:87:3e:bb:1c:54:
be:e0:b9:dc:c4:5b:68:65:f1:6c:92:6d:dd:0c:63:83:29:1d:
9d:9d:29:3a:0f:00:c4:5f:46:33:bb:06:c9:fc:f2:fa:a8:1e:
92:6a:54:94:5d:c1:b1:b3:7c:1f:9f:60:22:34:08:d1:a7:d6:
3a:25:b4:2c:e5:14:37:78:e1:b4:ab:16:d6:a4:4f:26:7e:62:
37:3c:cd:03:f1:bb:16:4e:6d:f1:97:2a:3b:51:a5:95:cc:a5:
ac:45:5f:30:71:f8:b3:3a:03:77:34:f1:ac:f1:6f:ea:ed:b5:
a1:2a:8c:c0:5c:47:b2:1e:c0:ca:1f:d4:e6:42:35:e3:22:69:
87:93:70:c4:c1:ad:43:67:b9:bb:5c:b9:cf:ad:78:bf:90:af:
73:66:24:1d:f2:12:9a:80:9c:4f:1b:e1:b0:e2:95:9f:94:f1:
c5:c5:c8:ec:ec:06:05:7a:b0:a2:0e:bd:68:03:c3:a7:1b:8c:
f7:20:1d:42:bc:a6:4f:5a:60:a5:cf:6d:a0:6a:0d:20:50:91:
c7:05:73:5e:48:4b:59:4e:63:29:0f:f2:4c:fd:42:38:b0:bf:
92:ec:3d:1f:1a:26:65:44:83:1a:6d:4a:cb:ec:fe:1c:f0:98:
a4:e3:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:38 2025 by rpki-client