Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: 8RdPfQaCc6yCLv0nGHodGQK1UqiwsDKsU6b0gYZR6MY=
Subject key identifier: AC:F6:AF:E5:F6:68:0A:F9:69:CC:6C:CB:89:07:85:17:32:1A:F4:36
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 0199FF2282DC450E73E957F322B7C45F2D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: DRq3knaaWwIdVilA2zaLlu4VrcZQkPn7tocncoSwIAk=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:82:dc:45:0e:73:e9:57:f3:22:b7:c4:5f:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=acf6afe5f6680af969cc6ccb89078517321af436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:1d:95:c4:b3:b5:d0:a8:6e:fa:e4:aa:8b:
f3:f1:2f:3a:6e:80:7a:72:08:45:10:86:47:8f:89:
28:9d:98:4b:6e:55:8b:c1:0e:2f:33:ad:88:a3:5b:
74:8d:c3:87:29:28:82:62:85:c5:13:ea:a7:d4:1a:
b9:ae:40:f9:1d:bc:d1:a1:6b:3a:c2:c2:f3:d4:5e:
59:b8:96:95:a7:da:c2:0f:2b:0d:f0:0c:49:99:44:
7a:93:2f:77:c2:de:6a:13:0e:82:2e:f2:bb:95:1a:
02:08:00:0a:b0:4b:d6:6e:75:ea:5b:6b:36:82:bc:
f3:3d:3d:61:0b:1b:1b:06:cf:e5:eb:07:56:c9:04:
2d:43:c1:c9:eb:48:15:e1:81:6e:3e:f9:1b:6d:a3:
f4:20:aa:40:c2:db:9a:3d:60:82:66:e8:1a:b6:27:
24:e2:ef:6b:fe:cf:e5:30:0d:f2:a7:ea:e6:b2:14:
2e:0b:56:18:2c:f7:5b:5d:9c:3f:3f:ab:3b:09:56:
33:5d:00:9d:24:bb:29:1b:d0:ac:b7:88:e5:8c:48:
19:a1:d5:bc:cc:a6:3e:5c:78:24:c5:7f:29:65:53:
1d:de:ba:89:04:a5:37:07:18:f9:c1:fa:51:09:5f:
66:09:b3:f1:72:ba:b9:61:7c:db:fb:30:13:45:61:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:AF:E5:F6:68:0A:F9:69:CC:6C:CB:89:07:85:17:32:1A:F4:36
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7a:7a:f5:c8:1b:24:94:05:bf:e0:5f:6d:bf:40:7b:0b:e1:
19:a8:39:89:ae:05:67:94:84:16:41:93:a2:2d:62:fe:2a:29:
05:6b:89:46:2f:96:b9:ab:fd:53:87:39:f2:6c:03:91:ff:cd:
e1:e8:5c:d3:89:dc:3f:fd:4a:6a:f4:de:75:ea:a9:ba:20:3d:
57:46:06:e2:c9:81:0e:9d:4c:6c:09:f4:85:d7:6b:de:34:d8:
22:01:6b:0a:ac:f6:d9:25:53:2f:a6:dc:be:79:23:d8:e5:0c:
69:3e:fe:5a:c6:92:5b:3b:5d:a5:2d:9e:32:99:58:01:a6:f0:
81:d6:c9:a7:c5:b7:44:e9:39:1a:0e:85:b6:b6:47:4c:63:50:
3c:c4:d6:41:7f:60:c5:0d:aa:00:32:37:fe:09:ad:43:d6:d7:
7d:bc:1f:f7:89:e7:0b:3f:fb:2f:1c:8e:8f:7e:12:49:53:32:
a5:55:8f:f4:ba:07:34:4d:d9:4a:c2:4f:45:82:7f:09:83:7b:
bf:32:41:22:2c:d1:4b:39:02:5a:9b:65:78:0c:50:30:36:fe:
85:6c:aa:e5:6f:96:0f:d2:07:60:58:df:c3:75:35:f6:f5:02:
6b:f1:03:6f:a9:8e:05:9d:29:df:b2:f6:0c:87:1d:42:3c:07:
67:24:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:15 2025 by rpki-client