Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: jKAbie4csN92BcVzQPDle8s7BabWUEDZEn+JPY/bgcU=
Subject key identifier: 40:F0:13:92:C4:B3:6A:D4:92:87:F1:E9:F9:BF:0B:ED:61:3D:42:B3
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 0199FD345F72D62747F03E9E393EF8EE420E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 108B
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: SFT88X8UpNg0ONx1PDgpTO0VefnU7XTnY12nh6AcsEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5f:72:d6:27:47:f0:3e:9e:39:3e:f8:ee:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=40f01392c4b36ad49287f1e9f9bf0bed613d42b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:15:ac:70:9c:94:c9:17:24:ff:6a:c2:ec:
67:03:8b:a0:6a:44:ea:b5:fb:c0:f5:f7:f1:d6:14:
04:b6:8b:25:d7:ac:af:7a:e0:72:d2:e8:d7:28:dd:
15:8b:ff:27:c3:a2:eb:5b:d6:ba:6b:23:34:cd:c2:
0b:dc:b4:10:85:dc:7c:74:5e:4a:12:bd:1e:a3:ef:
7b:1e:91:25:80:12:f9:d1:bb:cc:f7:fd:07:7d:0a:
88:7f:83:98:da:8b:fa:91:58:dc:16:d2:e9:48:15:
74:6a:d7:b1:5a:f7:e0:48:ec:a6:0e:4e:dd:86:6d:
93:74:af:01:be:5c:7d:52:fe:67:1d:6e:18:e0:c7:
99:30:56:ee:56:73:e6:d6:f6:b5:8d:e9:04:53:11:
a4:55:d1:6a:45:a9:96:e4:91:1f:aa:67:5d:3a:c4:
d0:c9:f3:7c:42:7a:5c:2a:e3:60:4d:5f:ba:35:0e:
cf:b7:03:b6:1e:74:b5:be:13:7d:94:bc:aa:61:5b:
e1:21:3f:f2:0c:a9:22:dd:37:ba:7e:e3:30:16:0e:
a7:26:eb:bd:e0:86:02:e4:eb:c4:50:dd:13:12:89:
c2:af:30:fd:d0:e0:8e:a6:4e:70:94:8a:de:48:9a:
e2:82:ee:b4:7a:f0:d1:48:58:e5:b4:c3:48:b4:1f:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:13:92:C4:B3:6A:D4:92:87:F1:E9:F9:BF:0B:ED:61:3D:42:B3
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b8:88:24:b3:51:33:6c:31:e2:7f:b1:61:73:e1:fe:7a:7f:
80:ff:73:cf:56:a2:79:96:ac:1b:a9:5e:4b:73:2b:b0:ee:96:
cd:61:8a:a5:64:9e:a5:4e:86:34:eb:35:dc:cd:a7:38:28:68:
83:e8:3b:62:d7:57:14:39:8f:c2:dc:5d:1e:1e:53:c9:21:39:
08:cf:fe:0f:8e:57:9d:14:19:75:41:31:fa:0e:79:2e:f0:83:
82:44:90:d6:2d:77:ac:36:6d:e5:a7:bb:fb:15:cb:99:53:2f:
9e:64:1c:ec:2c:7c:6f:44:2b:e6:c5:21:d7:b1:0f:61:fc:8e:
b6:e1:7f:99:d0:e4:5a:44:e6:00:0e:9b:b2:d5:2a:1b:a9:2d:
52:a1:36:75:d4:dd:0f:78:e5:43:6d:b6:73:95:28:31:94:b2:
54:7d:d3:90:ea:ed:01:9d:ca:e4:cc:de:59:16:20:80:29:9b:
34:8c:35:3c:03:96:4d:3f:0b:a7:e2:83:8f:0d:49:48:5a:8b:
a2:05:da:ff:64:49:fa:d1:b8:59:fe:a2:d0:e8:fc:a6:c0:85:
b7:93:9d:c3:3b:88:c5:44:04:1a:bd:fa:b9:64:6f:27:8d:84:
f2:10:0d:4a:84:ae:c9:8d:e5:cb:88:16:57:4e:f5:19:73:e8:
e6:3e:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:13 2025 by rpki-client