Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: A8MlCH9mQBTcX5wl0NjpNOv9Ph83elbLTg1SBM13BRk=
Subject key identifier: 44:CA:F8:CB:83:97:8A:08:51:3C:67:1B:98:6A:70:E8:C2:42:08:1F
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 0199FC21B7359367519BFC53A9E7EC113EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa (hash: XfsGt0J7O4EdBwVu7o4CD1xoooiqwOChTXXKbThpML4=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: /nvV5Ipde8Ur/htGcf02PzrksY+pecMYiCj/LZSrs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b7:35:93:67:51:9b:fc:53:a9:e7:ec:11:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=44caf8cb83978a08513c671b986a70e8c242081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:58:85:16:ad:19:05:0b:45:20:92:1a:ec:
a6:9e:3d:18:85:42:a0:aa:86:98:60:02:2e:5c:0c:
d2:6f:cf:74:fc:4b:37:04:28:f6:4b:58:9f:ce:2b:
48:c2:ce:63:3f:be:b1:3b:e3:ec:bb:c0:91:fc:42:
23:b9:46:09:cf:a7:18:7e:37:35:5e:b2:cb:5e:bb:
74:e2:61:80:0c:8d:72:36:84:61:19:90:1c:24:d0:
4e:57:e3:c2:76:ae:80:c2:64:4d:4c:c2:ba:87:09:
48:87:49:e9:9f:ca:89:54:c6:2c:05:e1:2a:44:37:
5d:36:04:4b:d4:97:93:65:0c:a7:1b:6c:7d:31:e6:
f3:c1:6e:98:7f:5b:47:1c:02:4a:da:c3:a8:63:b6:
1b:f9:8b:95:c9:a6:63:64:0c:47:a2:b2:33:91:32:
03:7b:ef:ba:86:75:79:80:5d:0f:59:75:3c:9a:f6:
8c:0f:d8:a6:62:d7:aa:88:9a:59:7e:ac:ec:33:36:
42:fe:cd:7c:d2:8d:c9:6e:86:62:8d:5c:ed:00:a0:
cd:bf:e6:8b:1c:f6:e5:fd:14:3d:8a:51:50:87:3f:
c5:34:31:0c:32:c1:7a:bf:7d:a3:d0:ca:2a:a5:2b:
96:a5:f4:3a:c1:6d:d8:d0:34:c9:74:cb:23:dc:72:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:F8:CB:83:97:8A:08:51:3C:67:1B:98:6A:70:E8:C2:42:08:1F
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:69:92:d2:5e:1c:1e:29:42:a4:0e:3f:b5:45:39:6e:3e:
b2:6d:6c:73:63:4e:e8:37:5f:77:af:c0:6a:0d:a0:87:28:b8:
09:56:b7:54:35:02:19:a8:80:c5:72:39:74:01:d6:78:96:a4:
9a:c5:c4:9c:76:af:8b:7f:11:45:fe:96:21:53:69:a6:7b:b9:
14:f8:9a:fa:bd:c9:38:5b:09:c0:be:c3:39:42:f4:94:f7:93:
76:da:4d:d7:2a:f7:68:d3:40:ad:1e:c1:d5:c4:a9:78:0f:c1:
b5:9a:f5:41:0a:bf:84:f3:21:e6:ec:0c:91:7a:b2:ce:e8:d5:
a1:1d:dc:83:b1:10:a3:42:d7:44:86:16:bd:2e:88:2b:21:d2:
85:e8:bd:d3:b9:14:0b:d5:6d:7d:94:13:88:55:30:13:df:1f:
89:81:54:71:ef:a4:fa:cf:71:3c:b6:c6:ce:8d:86:c9:cb:6b:
22:e1:9d:76:4c:43:8c:82:eb:43:74:60:9c:00:45:9e:84:4b:
bb:9a:c1:68:86:36:c1:3b:f9:26:5d:35:e0:67:77:32:3a:d6:
27:13:1a:06:f0:6a:04:45:2b:4f:cb:f7:54:88:eb:df:2f:51:
3a:16:91:c6:2c:04:2e:59:05:64:66:af:b1:a7:5a:6d:93:af:
f6:29:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:03 2025 by rpki-client