Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: eeHIeXMPF+/XgSZd7WWfxKoi6IkftNrtZOlmlveb9jw=
Subject key identifier: 17:0B:4B:3D:C8:CC:A3:2E:4F:77:6A:36:4D:30:56:26:BF:D2:86:6B
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 0199FDD981BB00773B7E528AEB7F08A5B498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (hash: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=)
2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: mzm9w0k0oklte6LFJ9T6cpNERrr5n8yPBl+plj4OnbE=)
3: MuuzFIyNpWZONMllHbmnXx8HRv0.roa (hash: U3fGXgKZfpms0csUXLU3nnmhzkgEcT4L/f6Vy+UF3Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:81:bb:00:77:3b:7e:52:8a:eb:7f:08:a5:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=170b4b3dc8cca32e4f776a364d305626bfd2866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:f2:ba:92:e8:86:72:04:72:67:6c:9f:64:
8c:fc:5d:6f:63:b9:d0:76:8d:92:2a:45:1c:44:e7:
26:81:1e:5d:10:52:d5:a0:f8:98:ad:fc:45:6b:29:
74:02:87:e2:0e:fc:67:31:1e:05:a7:bf:9b:73:41:
cd:5a:9f:3e:47:89:9a:7b:51:7e:ef:c5:44:cf:59:
4c:30:c1:b0:0b:40:a9:c8:63:0d:b0:75:59:09:6f:
ff:41:b3:32:06:da:db:b7:88:ff:4a:d1:0d:37:b5:
f1:43:46:00:88:4b:ad:6c:70:6a:e2:1a:66:ff:dd:
6f:81:4b:3b:88:96:c9:43:d6:25:b7:86:54:b2:63:
be:ee:32:a3:ca:72:58:5c:84:d6:2e:3f:8f:fc:45:
a4:81:b2:4d:0d:d5:d8:2c:a8:aa:fb:0a:63:ea:c0:
ad:bc:0e:54:4a:28:49:af:4f:79:ef:5d:58:ec:7a:
61:44:36:a4:96:98:8b:79:34:bf:91:2a:31:bf:0e:
34:08:88:e6:10:0a:86:54:9e:61:e8:1e:af:00:32:
36:a9:0d:9a:2a:8a:76:06:58:40:df:96:71:00:00:
ec:6f:59:e7:b4:80:45:13:f3:73:e3:e2:fc:ff:e6:
1c:cc:45:72:ad:43:00:83:19:24:46:4d:53:7d:79:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:4B:3D:C8:CC:A3:2E:4F:77:6A:36:4D:30:56:26:BF:D2:86:6B
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d0:0a:74:48:ca:16:8b:63:e6:63:3f:1f:bb:09:ae:60:a1:
49:c5:93:a5:eb:05:30:6c:11:a0:f4:5b:89:19:1c:07:6f:b5:
7f:fe:b1:f8:84:16:e6:cb:fc:74:80:fc:4f:89:4e:a6:df:d7:
a8:e5:3b:6f:43:6d:c1:db:5f:88:1c:df:2b:65:bc:e0:94:b6:
be:d6:56:c7:38:b9:21:18:74:c5:54:84:e8:5f:5e:2d:2c:8b:
4f:83:5e:3d:68:60:cf:50:92:11:b7:1e:34:e9:a0:23:db:c8:
b7:52:26:72:b5:5e:f6:a8:16:17:92:8a:79:c2:b0:9a:91:b1:
09:d3:5a:68:1f:45:e3:8b:7e:ce:8d:dd:df:41:7c:df:ec:26:
e1:77:e6:3b:0c:55:94:5f:20:04:09:0f:57:da:ff:f4:79:42:
93:b4:04:40:ab:39:78:83:b8:44:bb:f8:02:ae:3a:81:c1:97:
62:f3:c8:18:d8:68:ab:f1:31:d8:7b:f9:fe:56:f3:41:12:fa:
57:ab:bb:97:1b:13:f3:ab:11:da:6e:68:fa:af:f6:cf:9b:02:
17:bf:97:06:1f:69:cc:ad:f5:9d:f7:d0:12:83:09:a5:25:e0:
c0:92:90:93:3c:77:1e:3b:56:3d:cc:66:f4:93:46:84:37:a8:
9e:85:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:04 2025 by rpki-client