Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: YwT5qnPsuinsA15WvsjqmA2/umcWtuJUytpmIzVL7xc=
Subject key identifier: F0:AD:F3:68:4B:72:4A:B4:22:AA:15:A4:9D:AA:74:F9:51:AB:A6:E9
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 0199FD6AD1D61CAB1A325B383475AC2CC302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0383
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: uizV1oXbhzvDODUVD/6aoC5bRiEWIX0jCEyGrqAfyx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d1:d6:1c:ab:1a:32:5b:38:34:75:ac:2c:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=f0adf3684b724ab422aa15a49daa74f951aba6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:8a:64:91:a9:3e:2f:35:d9:bf:ed:60:74:
65:4a:de:6b:02:6f:27:ef:d5:05:49:25:da:36:3f:
c4:c1:da:31:95:aa:8f:a7:b4:f7:3b:a1:fe:fa:58:
4f:37:1c:83:36:43:c3:80:a1:8f:4a:44:50:6a:a5:
fb:24:51:5c:eb:9c:ba:16:8d:5c:71:9a:8b:55:f2:
cf:f1:7f:4f:8c:5c:21:de:d8:88:d3:ec:32:80:75:
4f:c2:a8:1a:46:a8:fd:b1:18:66:66:07:99:3f:47:
e9:fd:3a:f2:d1:c0:74:22:3a:15:40:8d:b1:7b:26:
0f:36:7e:fb:e5:f8:8f:e4:9f:c4:6e:4b:eb:ba:28:
fb:75:22:6d:9e:b6:b1:2c:8b:dd:c0:59:72:96:e2:
3c:7f:23:0e:48:65:ea:7a:93:39:55:41:d4:a9:5a:
8b:22:7b:ba:72:66:73:60:97:27:5b:df:a0:a1:46:
d2:9a:fc:29:f9:b2:cb:f4:45:5d:b9:57:a2:34:30:
3c:c6:a7:e1:51:e4:4f:fa:83:2a:e1:c0:42:4c:d0:
8a:87:e5:6d:75:cf:69:e4:16:c8:28:65:30:33:0c:
7e:8e:2a:c3:75:0b:17:49:ae:42:4c:26:14:31:e9:
9e:78:6a:6b:48:be:d7:4e:b3:75:a4:86:5f:1a:09:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:F3:68:4B:72:4A:B4:22:AA:15:A4:9D:AA:74:F9:51:AB:A6:E9
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:1e:f3:71:70:bf:92:c9:2a:a9:47:f3:16:21:fe:35:4a:
e5:e3:f9:6e:7b:e3:a0:0c:e9:b0:69:0d:bf:63:64:ca:f8:1b:
34:42:12:31:4e:f2:44:b0:f2:94:b5:99:d2:9f:ec:a0:ea:15:
93:48:9a:8c:c5:94:ce:a9:5f:a6:73:d0:c9:9d:eb:91:aa:6b:
0d:dd:cf:d4:fb:6b:65:1b:11:3c:03:ad:83:7b:54:49:2f:5c:
14:43:8c:a2:87:54:72:00:a9:ce:47:99:62:87:2b:74:6b:07:
6d:b2:c1:09:38:f5:00:3d:46:85:88:a0:fb:77:4b:fd:88:2f:
83:a7:93:2d:b7:09:c9:87:4b:71:5c:76:bb:00:76:08:26:d5:
95:91:fe:40:92:be:8f:d1:bb:11:aa:f0:62:bd:4d:5f:94:d8:
58:c2:ee:e7:9f:2f:9f:56:56:8a:a7:32:b0:b1:5f:96:4b:a1:
f1:86:81:5e:8f:1b:a1:62:d0:d3:c6:83:11:dd:01:71:84:2f:
ae:20:df:e5:17:eb:cd:3b:80:a9:19:49:34:c0:e9:a4:58:c1:
dd:5c:1e:82:18:e4:77:d4:fe:db:e8:cd:e0:92:79:07:ef:54:
66:0c:28:db:22:a1:1c:cf:14:e7:57:38:17:13:5d:ac:38:a0:
bb:24:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:34 2025 by rpki-client