Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft (raw, json)
Hash identifier: rPZU61z2ZSD6Zk05hbAjCx8ZAZiFwsow584A1fWQeqI=
Subject key identifier: 72:D1:51:68:73:B4:B6:CD:09:B8:91:28:5E:84:09:59:40:4E:0E:10
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 0199FCC6645B2F8CBA0C1AF412E5981DC4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: bdAF9viIHB5V5FhTALS-owQhcks.roa (hash: lPv9YsuyVHwxqfP/RRJpZeMDZjwRG/d34AhteS5V7Ew=)
2: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl (hash: Su2gILodYG0l/u386DV9rtkjUZ6+G1D5Xlo2B6QURLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:64:5b:2f:8c:ba:0c:1a:f4:12:e5:98:1d:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=72d1516873b4b6cd09b891285e840959404e0e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:3e:0c:92:ec:a0:7f:24:cd:6c:1f:18:20:
e4:9f:86:9b:0d:20:c5:f8:d2:63:9d:13:40:90:40:
9e:9b:8b:24:c8:36:9f:ca:3d:43:89:94:d8:79:ca:
ca:51:ee:ad:3d:a3:d6:ba:d0:4e:30:c8:cb:43:ac:
3c:4e:aa:7f:f2:3e:7f:33:52:fd:e4:17:a8:86:86:
09:72:8f:b4:da:23:07:6a:7d:6b:da:f2:84:25:1a:
2d:d7:34:8d:97:2f:e2:cc:09:ef:05:32:32:e8:39:
9e:d8:7a:7d:92:1e:7c:15:3f:e2:57:b6:bd:1a:67:
6b:0e:d7:3b:ae:1d:b2:6f:c9:0f:5a:65:f2:81:6e:
98:00:18:b1:9c:93:32:45:62:03:c4:81:b3:60:01:
75:b5:53:36:fd:12:62:2c:a6:7a:c4:1b:0b:9e:04:
7f:a2:05:ec:11:b9:77:6d:21:6a:dc:a0:e2:07:0a:
3b:34:d1:30:e9:24:07:21:6e:72:42:32:91:b2:3e:
bc:be:0a:b6:d1:9e:24:8a:5b:f4:2c:00:62:ff:7b:
55:36:1e:3c:10:62:f3:97:0d:df:9f:af:92:e5:e3:
a1:02:a4:bf:fa:39:31:95:36:37:de:da:59:d0:87:
1e:50:f2:63:43:47:68:b2:3e:85:1a:b3:37:4e:36:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:51:68:73:B4:B6:CD:09:B8:91:28:5E:84:09:59:40:4E:0E:10
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:13:07:a0:45:72:96:34:d2:87:f3:c9:98:47:7d:76:32:f6:
0e:20:ef:28:3a:38:2a:30:2a:e6:21:47:d9:c3:c9:c6:b0:5b:
c2:1a:65:50:08:3a:a8:e1:16:e7:0c:38:00:eb:66:b1:d9:c8:
43:fb:09:4c:0a:65:71:54:33:6c:6f:ce:26:4a:84:80:be:05:
e9:a1:a0:6c:cb:7b:f6:25:1d:66:a5:6a:4b:da:b1:a2:0d:42:
64:50:fd:15:8d:cc:88:29:d0:5b:51:7b:e5:6a:3a:7f:89:aa:
0b:d8:c9:c3:88:71:2b:49:9c:bb:0b:e5:5e:c0:1f:0b:16:32:
c9:8e:8c:ee:20:e8:fe:9a:1b:a1:32:3d:ee:8f:80:5f:3e:86:
58:e4:27:8c:8a:8f:35:07:84:80:78:02:1c:75:eb:80:f5:d3:
e8:7c:06:f9:5d:77:58:0a:33:ac:9a:c0:ac:e2:e1:8d:69:07:
b7:1c:fe:29:b5:c2:46:25:d8:f1:0d:a7:30:8c:dd:a5:84:09:
7e:d8:b4:45:e3:02:31:2f:76:e2:89:7f:17:62:6f:6d:03:23:
d7:cf:21:9d:d1:96:9a:f4:e6:75:3b:85:f4:15:a8:0f:0c:1e:
e4:0f:f6:83:6f:30:ff:04:5d:e1:ec:51:7e:f3:89:82:9b:88:
ba:13:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:23 2025 by rpki-client