Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: ueIERKzPQoZ8poT9D6RSs2CoU2p6ZyPDkVETJ9smHJo=
Subject key identifier: CA:A6:67:EB:5D:F2:A7:AB:5D:6D:EE:8F:FD:06:FB:52:D0:B7:7B:DF
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 0199FEEBF1FD4A436E695D63E77B8F017308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: vfvyTijdjrdRcz6e4s6Hl9DkLmWXl8wXrTYsfmHeFD0=)
8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f1:fd:4a:43:6e:69:5d:63:e7:7b:8f:01:73:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=caa667eb5df2a7ab5d6dee8ffd06fb52d0b77bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:e9:b3:b0:95:a6:62:fc:47:67:89:0e:eb:
55:cf:9f:5c:7a:ff:35:8b:04:3d:db:16:94:cb:9a:
15:1e:c7:96:a6:97:07:46:90:d0:27:cf:e9:44:ae:
84:64:09:c8:3c:be:86:18:1d:38:9e:6f:75:37:e2:
8e:ef:e3:cc:8f:83:af:20:8b:5a:dc:b3:a8:f3:f6:
a5:19:95:ba:ba:6d:c5:4f:23:bb:6e:a1:db:34:a6:
17:3c:6e:e1:06:51:27:b0:0f:10:c9:f0:fa:e2:7c:
cd:3e:6f:a7:1f:39:05:f2:bf:78:5f:9c:f5:0f:88:
6d:1a:53:26:8b:d9:39:2b:13:43:aa:c6:46:f4:b3:
bf:82:f7:cb:ba:f4:a7:f6:96:81:3a:65:72:3a:f4:
45:50:a1:85:3a:54:b9:22:f8:61:f2:5b:e9:63:a8:
85:f3:d7:e4:49:d3:57:f5:69:57:69:b2:f8:dc:24:
1b:22:03:36:6a:79:75:74:7e:08:23:00:1f:ed:e7:
36:7c:1b:6d:10:84:5c:d7:5e:64:6d:ce:fc:20:e4:
53:98:6e:66:62:aa:39:76:30:5c:87:ed:87:85:51:
37:5a:d0:c9:be:7b:6d:e8:c1:d9:3e:f5:66:dc:36:
fd:9c:4e:be:6a:e8:4c:9b:7f:e8:ae:47:f8:dc:60:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:67:EB:5D:F2:A7:AB:5D:6D:EE:8F:FD:06:FB:52:D0:B7:7B:DF
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:4c:fa:32:d6:8e:28:fe:02:a5:66:26:34:60:3a:66:35:
f3:12:81:9f:7d:67:10:97:2c:92:d3:44:7d:d5:d0:1a:42:e2:
85:7a:15:44:cc:9a:c2:24:33:fe:38:47:90:fb:55:62:a1:79:
41:92:78:7e:67:ee:55:df:53:97:53:c2:b7:d1:a3:10:5e:1a:
05:71:cc:b3:cd:dc:8e:98:79:2d:f8:ec:8c:de:8e:7e:63:8e:
d5:ca:d4:e6:23:81:95:f6:bf:db:b1:24:4b:81:68:f0:ab:fc:
ed:0b:d2:4e:dc:9b:d3:02:72:f3:a5:d6:49:57:7f:ec:08:55:
0b:ef:06:82:18:ba:83:52:3d:0f:94:9c:b7:72:f6:55:28:49:
09:8d:8b:47:a0:1b:22:00:cb:b5:c2:6e:4d:ee:26:11:82:46:
97:30:20:a3:55:2a:7a:3f:e8:b8:56:d2:8a:64:6e:de:f2:9b:
2a:80:61:f0:43:71:38:46:c6:cc:04:c2:e5:76:4c:b7:0b:f6:
6d:0a:e0:cc:2b:c9:4e:f7:b3:d3:62:ff:98:51:e6:c6:1f:be:
0c:82:02:e5:92:c8:81:0a:2f:1f:41:3c:f0:bd:b5:e7:b8:be:
63:ee:83:a5:c9:b3:9f:e2:bc:88:20:fc:ac:ff:53:e3:c1:eb:
dc:88:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:18 2025 by rpki-client