Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: LLskdJYLPdo7N8mzmHceyaYJ4WWzNWJA5mrE6HFFRQE=
Subject key identifier: F5:CA:60:A1:BC:FB:A8:D9:EA:43:EC:71:09:6D:FA:F0:6D:D1:EB:B6
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 0199FC584D9E7B13558D19323A96E88A7DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 02E9
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: F7hFHVt5GnAjfb0AGvjaQBNPnKg.roa (hash: btzZxwXvt98Q7y5uMwpF7P7FoBwM/PNcqw+tRVhi4ns=)
2: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=)
3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: skp1kLb/jDO6fJab0E4AJvNzs7jSYysX/it5d5bdj6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4d:9e:7b:13:55:8d:19:32:3a:96:e8:8a:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=f5ca60a1bcfba8d9ea43ec71096dfaf06dd1ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:f4:42:48:df:08:0d:1c:e2:d7:a5:f1:ce:
95:5c:5b:40:bc:1f:cb:2f:77:de:99:d9:b0:3c:77:
43:e8:e2:6d:6b:e7:9c:dd:be:a8:5b:ba:59:57:c2:
26:99:49:f3:10:db:af:7d:e0:7e:73:af:1b:f7:64:
d5:63:0f:b9:6a:5b:9e:02:32:40:94:f5:50:e6:11:
15:bb:c3:88:c5:c3:4b:22:9a:04:6c:19:da:71:7d:
b9:84:48:c1:28:1b:53:56:2d:51:8b:92:9f:17:b2:
45:4e:f7:8c:25:3b:b4:73:fe:e6:2c:a5:0c:05:89:
1d:0e:b9:9e:32:09:2c:fb:bc:6e:83:68:78:6f:79:
47:99:e7:70:34:4f:80:37:33:68:1a:ef:22:e0:2d:
9b:ab:d2:0c:f7:03:95:48:64:fc:a3:61:72:cd:63:
28:b9:36:bf:7d:6e:0f:70:58:7e:78:39:24:5c:7c:
ec:f9:ba:b9:70:50:07:ff:14:b5:fe:c6:86:14:7d:
23:fa:62:d2:f4:d0:d1:e1:0c:f5:5e:10:11:3b:66:
d6:95:f7:08:ee:a7:21:58:2c:16:11:75:de:cb:47:
7f:59:57:22:a5:68:42:25:aa:b0:c3:ef:ed:4a:e5:
f2:ff:4e:67:75:df:4f:15:3e:14:c1:0d:79:37:4b:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CA:60:A1:BC:FB:A8:D9:EA:43:EC:71:09:6D:FA:F0:6D:D1:EB:B6
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:47:2b:0b:a6:06:69:6d:e8:37:66:40:47:50:35:27:fe:
6e:27:92:f8:a2:ed:b2:35:df:52:df:5f:62:26:7f:7b:cf:fa:
7b:68:a1:71:86:c8:4e:8b:a9:8a:0e:bf:31:85:a6:67:7d:65:
57:34:cb:1f:bd:81:16:50:15:f1:b0:b5:70:4d:20:6e:90:d4:
48:0d:00:d2:c1:b5:31:24:14:c9:80:32:6a:f9:a7:a2:f5:4f:
7f:fd:d3:51:0a:2a:0a:36:56:7b:29:20:29:9b:6e:e8:61:b4:
7f:7b:32:3e:58:74:3a:f8:99:3b:b9:8b:9b:54:7a:c7:b7:40:
fa:11:6c:e9:bc:e7:0d:29:5d:4c:ab:c9:81:ab:70:ec:f5:97:
83:ba:f0:52:6f:1a:78:05:a2:30:0b:f8:d3:9e:c6:ec:fa:aa:
4b:6f:a2:da:0b:00:91:d3:60:e2:5f:b8:37:89:27:97:be:9d:
d8:d6:bd:f5:bb:c4:51:8e:02:7e:43:76:21:d4:f8:a4:8a:61:
ce:a7:dd:87:29:56:f2:22:07:ae:8b:9d:9f:c0:30:1a:82:8f:
52:60:b6:5e:93:94:0b:52:7b:fa:71:e5:40:db:4d:a0:87:9e:
22:31:ea:fd:33:02:99:19:9d:3e:5e:7d:52:b5:bb:e7:0c:e4:
91:66:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:13 2025 by rpki-client