Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: MvJTuTusMGiRy5mCz8s251VY1XA2NEI86fOgevzGgL0=
Subject key identifier: 07:FC:65:2C:73:B6:DC:8C:AD:3C:33:0B:6D:48:E9:A1:14:B9:EC:CA
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 0199FBEADC657B7FA41A2000BA9D5B95EB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: JxzdTI04gK9v4llt6YQ/bia5VAMKEOSVPVkVAohTkj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:65:7b:7f:a4:1a:20:00:ba:9d:5b:95:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=07fc652c73b6dc8cad3c330b6d48e9a114b9ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:2f:b8:4f:d4:c5:74:1d:44:5d:dd:aa:58:
0f:12:c9:97:14:30:54:82:08:cb:41:65:8c:98:9d:
67:90:91:84:b5:1d:4b:f5:f8:e3:60:6b:32:a9:ba:
35:ea:5a:95:b1:cc:64:0d:da:51:53:38:db:f0:90:
eb:33:f3:1e:19:88:a6:71:28:6e:a5:a7:19:2a:67:
b3:84:30:24:0a:d4:2c:94:2b:ff:2e:4b:d4:7c:41:
99:35:90:43:8e:ce:12:50:3b:0b:d6:2f:b2:38:6f:
07:84:8a:bd:ce:7a:47:a4:41:49:d0:a3:1f:fc:b9:
47:58:d0:7e:db:13:52:78:c3:48:d0:b0:72:7f:c1:
4e:a5:05:9d:37:fd:db:8f:9a:79:02:0c:f6:b8:ae:
24:a0:0f:e4:49:27:03:14:61:5c:41:2b:fe:4c:90:
12:f0:79:9d:c5:fb:6a:37:42:ba:ad:e5:c1:62:fa:
55:c7:1d:53:e5:e6:a7:1f:c5:f2:3f:e1:2a:79:49:
b8:89:06:24:12:74:62:e8:d8:f0:c6:20:a2:4b:c8:
57:32:c4:0c:c1:df:dd:43:48:47:e7:5e:b2:68:13:
3f:61:85:74:29:80:3a:bc:41:76:36:eb:af:0d:3c:
0e:2d:3b:02:17:a2:10:66:0e:e7:d6:0a:3e:23:af:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:65:2C:73:B6:DC:8C:AD:3C:33:0B:6D:48:E9:A1:14:B9:EC:CA
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:aa:69:05:b1:ce:3f:94:0a:57:81:48:e1:3a:21:a0:2b:
b7:82:c4:a8:92:8e:e4:5f:62:b0:40:24:92:a4:ed:c8:2c:cf:
a8:5e:ae:1a:ff:c7:21:1c:a6:36:0b:f2:51:ab:1d:87:ba:ce:
89:78:98:07:5e:31:b2:dc:ce:44:ec:4a:2a:b6:b7:ee:81:bd:
b1:2a:2c:cb:85:7b:76:4a:84:1f:0b:d3:2d:16:67:73:c0:47:
15:9a:df:f5:c0:8b:00:b1:7a:91:24:d2:dc:14:5c:e3:d8:69:
a8:b3:c2:89:8d:ff:b3:66:12:db:28:99:b2:e3:26:74:02:68:
60:ba:07:18:fb:f5:9b:b2:eb:21:65:65:11:7b:aa:93:ab:fc:
a8:07:5d:ed:84:57:7c:cc:fc:46:bb:5d:ad:77:cb:db:98:ba:
c5:7a:d5:f7:88:aa:79:e2:a9:5b:c5:1d:1a:a5:73:72:5a:69:
36:05:23:3b:56:65:6d:3a:ad:5a:07:22:c6:d9:fc:3e:ca:12:
99:83:44:c3:75:bd:a7:da:f6:66:dc:84:44:4c:02:2a:96:cc:
4c:ac:c1:6b:8e:f9:e7:04:ea:67:73:c2:a9:87:c0:bc:bb:f8:
29:d2:87:a0:9e:b1:fc:75:31:b0:be:08:fc:28:50:1d:56:90:
72:18:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:49 2025 by rpki-client