Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: fpesHkKWDRHosCCycz8JH6+eiTWVRDBbH9KXfMWC9bY=
Subject key identifier: 19:BB:A6:AD:AE:74:F1:27:55:46:3D:A1:A3:10:A8:DE:CB:C2:B6:B2
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 0199FC2175879142FA1B41CEB6C3F6E675B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 13B1
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: dtuuZ2hAJyNRTlPx67UxC9d5alj94xh6kZBNSmhApzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:75:87:91:42:fa:1b:41:ce:b6:c3:f6:e6:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=19bba6adae74f12755463da1a310a8decbc2b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:35:49:0f:d8:9b:86:d0:50:b7:b6:dd:c5:
6d:50:a1:e9:5b:9c:57:73:70:6f:d9:26:cb:3d:de:
3e:5c:f1:b6:62:94:7b:8d:b4:88:a5:bb:4c:77:6f:
bb:34:bf:f1:1a:b2:32:e4:57:e1:55:13:ec:11:ba:
ef:c0:a1:74:27:e4:19:31:a3:75:4d:ee:d1:ee:4c:
d0:f2:d0:f5:1f:1a:d4:97:6d:1f:68:0b:50:b1:d2:
73:7d:4f:b2:25:37:19:09:86:e0:82:ed:bc:8b:5e:
99:40:3e:fe:e9:13:2a:f8:07:a5:d9:93:2f:6a:80:
43:14:09:65:59:b6:2a:85:05:4b:64:5b:fc:83:54:
28:a4:e4:48:c9:e2:8f:50:e6:eb:53:38:b3:63:2e:
a3:12:bd:b4:a6:0b:e0:a7:54:f1:bb:8a:df:fd:be:
c7:7d:8d:d6:11:bf:3e:23:5f:be:c1:c8:e3:14:32:
5b:70:47:34:58:94:d7:95:cd:a8:25:c0:b7:3f:f2:
a7:fa:e7:d3:25:6e:c1:3e:39:78:27:51:72:11:aa:
85:78:2b:40:52:b2:9a:37:24:97:7e:6a:19:61:b8:
58:a6:1c:48:19:22:e0:8c:a1:85:77:82:7e:9b:fa:
19:ef:ce:a0:8d:31:e0:37:0c:fa:11:ab:15:88:ce:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:A6:AD:AE:74:F1:27:55:46:3D:A1:A3:10:A8:DE:CB:C2:B6:B2
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:bb:a6:fe:0d:b1:37:a4:97:01:3f:1b:da:73:4f:26:ee:
9d:81:5b:e4:e4:53:71:5d:59:09:18:4e:d1:b6:7f:ee:ad:30:
a9:bc:1d:e7:80:78:30:36:69:6c:1f:ec:af:6f:52:fa:5f:65:
f3:74:f9:41:24:6b:29:9f:8a:f6:bf:bd:1a:9a:df:ce:b6:f8:
96:9a:f1:95:aa:c7:68:07:d9:42:3b:31:3b:61:31:29:f3:77:
09:63:12:8a:3e:ac:9d:18:b1:cb:e4:87:8a:5e:2a:f9:6f:01:
91:ac:05:8b:bd:b2:b3:00:36:da:35:e4:d0:7a:47:06:67:5f:
0b:58:8d:30:7e:de:93:57:e0:b4:3b:14:ac:5d:c7:66:1e:f8:
73:64:23:15:93:e8:6a:bd:da:11:33:2d:5b:6e:62:4d:00:5f:
d6:70:ae:d4:01:06:44:97:5d:cc:3a:fc:a1:cc:83:3a:f1:d5:
c9:69:57:65:a2:65:46:42:23:bf:c4:e3:9e:3b:6d:47:40:81:
a7:98:58:e4:5e:df:34:2e:69:a8:85:9a:1c:24:62:e6:e6:39:
68:f8:17:55:be:23:ec:00:29:32:c5:24:a8:08:59:91:c3:a7:
d3:f1:d2:ae:da:64:e1:75:55:b8:83:dc:c7:28:0a:54:e5:c1:
d8:3c:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:20 2025 by rpki-client