Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: hf5VqCyfxbDRdmEi8LfKmajlZM2tjMBmUBJrMH4qZ1w=
Subject key identifier: 98:00:22:55:90:43:42:D7:82:5C:7B:77:11:F9:16:94:73:72:FE:3F
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 0199FDDA2E7135108D98A8C6CF4D24F1E026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 12F0
Signing time: Sun 19 Oct 2025 19:02:38 +0000
Manifest this update: Sun 19 Oct 2025 19:02:38 +0000
Manifest next update: Mon 20 Oct 2025 19:02:38 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: PyHCg25A2V51v5Ak4+5FTh2aJeO9sYZD9shdQYlsBBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:2e:71:35:10:8d:98:a8:c6:cf:4d:24:f1:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Oct 19 19:02:38 2025 GMT
Not After : Oct 20 19:02:38 2025 GMT
Subject: CN=98002255904342d7825c7b7711f916947372fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:11:27:c5:72:c3:05:15:50:24:92:64:ea:
c5:b6:e1:dc:88:f0:04:13:30:89:7f:20:22:f5:0c:
c7:16:90:2e:b6:ef:79:20:59:7f:7a:a8:cf:1a:2b:
15:d5:ef:a8:f5:2d:08:4b:d7:f3:2b:40:a3:73:b7:
04:5d:79:80:57:25:86:e0:4e:a0:98:5b:69:bd:56:
ee:27:ce:5e:f4:a0:d1:0a:a9:ed:50:cf:f6:33:3b:
5f:74:a2:dd:6b:7b:25:39:ee:55:5c:c7:21:08:7e:
04:23:d2:4c:10:3e:d4:e3:ae:62:98:94:bd:41:eb:
b7:50:b8:d9:be:98:32:01:40:ec:d4:47:84:fc:c3:
29:d5:0a:b1:4a:d6:a7:03:ca:93:82:e0:59:8b:1d:
c2:24:63:7f:af:c6:10:3d:23:03:40:b6:1a:ea:60:
e2:0c:67:da:31:21:0f:f3:5b:64:61:5c:de:f7:01:
c8:5d:6e:64:b2:66:a5:51:96:90:c5:2d:b0:c8:82:
9d:df:c9:ba:9f:cb:89:22:35:7d:aa:9e:07:bd:27:
44:8d:ab:21:1d:c8:6a:87:46:87:a0:e0:5f:9f:5a:
f8:87:76:6e:76:a1:3a:ae:20:24:b8:11:d2:da:94:
9c:82:03:37:aa:25:ae:7e:5c:64:53:22:d4:f1:69:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:22:55:90:43:42:D7:82:5C:7B:77:11:F9:16:94:73:72:FE:3F
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:7b:71:3f:12:a0:b4:6e:d4:d4:5e:4c:62:e9:bf:5a:3f:
00:78:d6:da:a5:f6:a0:19:8c:9e:b4:e4:d8:b8:23:f8:22:e5:
a4:63:d1:72:e6:c6:d7:3e:c8:3b:5b:37:ad:35:39:cb:89:de:
9d:78:fd:c5:74:6f:96:4f:ba:03:47:5b:e1:86:81:c2:8d:f8:
03:b1:69:d1:c8:96:92:ee:64:dd:92:8b:0c:01:1d:44:17:97:
d9:f5:5d:ec:fc:fc:a9:bb:1f:56:a3:e2:23:68:48:58:d7:26:
aa:6e:1f:5f:01:fe:30:45:24:90:38:ac:2f:bc:de:29:b7:b2:
c8:b9:e3:08:00:a7:92:0d:eb:08:33:5b:03:4d:a8:37:6e:f0:
c0:b4:9b:ba:bd:c3:78:40:55:3b:5c:a5:24:1d:19:d7:78:8a:
4a:2e:85:db:a4:aa:29:6b:28:b5:47:f0:3c:e1:f3:26:43:c8:
6b:c3:e2:f4:c1:58:2a:8c:c0:cf:15:5d:da:e6:10:e7:fc:e7:
91:28:eb:80:a4:ae:48:98:95:ff:f9:f0:65:76:ca:68:e4:fe:
97:fa:b7:0a:91:70:f9:fc:4c:03:ff:ee:d2:fe:d3:fd:83:13:
a6:0d:86:e3:88:5b:cf:e0:ec:95:dc:30:0d:68:87:91:9f:45:
fa:ff:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:00 2025 by rpki-client