Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: c0PKmYpcBYwcKzfgiS/2FxfT+ZkgH8QuUIz+wLbbjqk=
Subject key identifier: BC:07:47:24:3A:87:15:F8:5C:57:B1:82:F0:0C:61:38:1E:C6:D8:BD
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 0199FBEABCF2CF4A7D044086104D1124F13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0811
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: MgIIDxTw5RuAq1ZQLySlPr5Q9OiWOQvYiFdgw6U2jLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bc:f2:cf:4a:7d:04:40:86:10:4d:11:24:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=bc0747243a8715f85c57b182f00c61381ec6d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:47:6f:92:24:cb:f2:e8:0e:49:47:10:cc:06:
b3:da:ed:b1:ea:c3:fc:fc:4e:d7:6f:3b:00:3c:a9:
4d:3f:97:61:bd:8c:b8:e9:d5:2e:2e:a2:09:87:c6:
ba:4f:a0:6f:63:cf:6c:a5:bd:71:6c:b6:10:3a:60:
ab:76:ef:f1:27:61:51:2c:0d:9e:e3:09:6f:b7:5c:
d3:19:16:0b:db:5d:f8:02:d2:ad:90:53:87:d2:2b:
a0:14:db:3c:96:57:3e:4f:51:1c:e4:ed:90:ab:02:
0c:84:44:a8:11:f1:04:a4:6d:a9:d1:00:b9:7e:96:
d3:2c:f6:0e:ca:f6:de:ce:0c:1b:77:8b:14:41:b6:
2d:2c:39:bb:63:45:13:29:32:52:63:6a:c7:6d:96:
3f:ae:bd:5e:f8:de:29:66:06:ab:c8:3f:ff:2e:a2:
2c:15:f4:84:d6:79:09:d4:6a:0c:0d:95:24:dd:99:
17:59:56:18:ce:84:b1:5b:31:13:c4:86:c5:c4:67:
e5:90:0c:ca:47:ea:e3:76:43:ff:5e:c2:51:13:33:
2a:5a:d9:13:1b:3e:27:fe:21:3a:fa:57:2d:66:9f:
3c:83:b0:eb:8c:98:d4:c3:5d:dd:5e:8e:49:dd:28:
f2:01:55:d4:e1:39:43:41:17:af:58:b6:5e:04:80:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:47:24:3A:87:15:F8:5C:57:B1:82:F0:0C:61:38:1E:C6:D8:BD
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:2b:02:2e:e6:e2:80:da:5d:95:c4:b2:96:5e:96:e1:49:
53:ee:ed:2d:27:71:a1:25:c9:b3:15:e9:3c:a0:31:20:13:8d:
d4:f3:b1:9e:d5:0b:03:e8:6c:da:f5:23:30:50:f4:fd:90:97:
bf:6c:e6:4f:19:33:00:69:b6:53:91:c2:b2:f8:bf:09:9d:94:
63:94:0b:52:9e:51:65:33:c1:71:d0:5b:4a:6d:85:9a:df:87:
9e:29:de:10:44:ce:0e:5e:ae:17:f7:bf:ba:a6:3a:ee:fe:22:
65:4f:68:3f:14:a7:96:e4:22:b4:56:74:d7:57:a0:29:e1:a4:
2b:4f:49:f3:a7:8c:b1:30:ef:bd:c3:5c:52:1d:ac:58:d3:e5:
d9:4c:9a:f6:a2:1c:71:21:86:d3:95:58:5c:36:d2:b4:89:32:
dc:5d:e7:b5:56:37:0e:1f:74:d0:86:91:d6:44:be:d0:ab:68:
f6:85:e7:67:f5:27:fb:b7:4e:21:5d:03:af:d7:1e:de:56:5b:
fb:1d:47:4c:7d:39:07:06:b6:6d:1f:57:b3:2b:64:48:6e:59:
4f:28:b5:e9:7a:74:12:1e:13:9f:8d:0f:70:ee:f3:6c:ba:7c:
50:46:bf:c4:92:97:4c:90:47:3c:a7:4e:9e:c9:b8:5a:7f:cc:
c6:7a:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:40 2025 by rpki-client