
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: CVxPxwtvBPDltRMUyrVZ8U97m2YRf7SVTgyR7QGB1SI=
Subject key identifier: 44:05:C1:3C:8E:0B:0B:52:5A:D2:2A:C7:41:A8:7C:8E:17:F2:1C:7C
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0199FB45B108C2DB0D3D80CD7B1271807FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: AsltX8UDzMYinpBWpHUXs0tgxEh6wF7BIIYNgDveVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b1:08:c2:db:0d:3d:80:cd:7b:12:71:80:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=4405c13c8e0b0b525ad22ac741a87c8e17f21c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:31:9e:71:cf:fa:8b:4f:b7:29:72:0c:f2:
3a:2c:7a:b4:61:9c:65:64:7d:9f:d2:43:fc:3b:0d:
d1:d4:83:8d:5f:68:f9:87:65:44:8c:0a:60:6a:fc:
38:97:90:82:2e:f7:08:9f:7a:13:cb:b5:8a:c1:cb:
e4:1d:5d:8c:cf:55:50:45:18:be:f9:79:7e:e3:db:
7c:3e:ac:3c:2f:97:30:25:01:1e:0b:d6:ab:d4:19:
59:56:93:f5:dc:a7:e3:3c:a0:01:ea:38:b0:34:61:
2e:6c:0f:ba:ed:16:d4:8c:6a:12:22:17:8e:c9:f2:
63:3e:a3:87:d9:b6:b3:de:a6:d5:ea:34:01:7c:1e:
c2:69:ce:aa:59:88:fe:22:09:f6:58:a2:be:2f:66:
1f:f7:5f:67:e0:88:a6:75:4e:81:64:a5:1d:8b:ac:
1d:e7:a4:9e:06:2f:3d:32:6b:3a:d1:26:c1:85:68:
92:db:47:6c:b4:a3:17:d5:10:f0:ab:3a:48:34:c6:
0e:75:cd:40:1c:93:1c:b7:f6:69:d6:1d:d9:86:8a:
44:fc:ca:c8:32:ba:0b:29:fb:6d:a2:8e:3a:5d:19:
58:14:23:3f:a4:b1:e2:f6:3e:42:55:dc:f6:c3:06:
59:fc:0a:08:32:18:52:c8:54:c7:dc:2c:63:ca:8a:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:C1:3C:8E:0B:0B:52:5A:D2:2A:C7:41:A8:7C:8E:17:F2:1C:7C
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:fc:21:97:c6:13:bb:e3:8d:b9:09:c6:54:bb:ca:2f:a7:
ac:37:d3:c3:f6:23:87:8e:36:7a:1e:18:5a:54:24:2f:d1:1f:
1b:77:61:94:85:6d:04:68:cd:b4:47:b9:f6:4a:c7:7c:db:6d:
90:c7:d5:1b:9c:47:d8:09:02:ec:8d:b3:e8:28:33:92:59:09:
14:9b:ac:41:34:6d:8b:0e:32:4c:af:bf:f3:89:68:29:40:9b:
43:09:34:7b:63:47:7f:62:43:fd:bd:c5:93:bb:2b:9f:f3:01:
6b:8d:8e:6f:65:69:37:3e:e9:dd:4a:d8:aa:10:de:b0:9d:c2:
65:cd:23:74:09:98:b5:95:75:15:d0:22:16:a7:94:27:1a:a3:
cf:90:3e:fd:ff:28:da:10:1b:72:a6:76:45:0d:a6:cb:c8:67:
ee:e4:d7:8f:db:a1:9b:58:01:9d:1e:49:f4:c8:38:1d:5b:3b:
8a:c6:d3:85:95:1d:f6:26:b1:33:a5:71:e2:a2:b6:80:3b:1b:
76:45:77:5e:71:2d:eb:57:d7:c2:8b:03:f5:b6:17:16:12:0a:
fe:02:63:04:36:8d:33:2b:85:a8:03:1e:a8:2e:85:3e:5a:8a:
1b:43:eb:88:3f:b8:c6:bd:c6:6a:8b:c2:9e:a8:bd:14:ec:2a:
29:fa:ca:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:17 2025 by rpki-client