Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: KAyRM4EvXNt0HfhMPWHRWyam+RuFNbWxnLYvLXrKrok=
Subject key identifier: 54:6C:C0:15:B6:B3:6C:84:0B:4A:DE:78:AB:84:5F:E5:08:7C:30:7C
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 0199FCC63D5CE4D4666F7EA8AEBD8056A577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 169D
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: dNh1eZsAYF3B7KUZy4UOIdA6ZSYUhxxdonFGpho9FnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3d:5c:e4:d4:66:6f:7e:a8:ae:bd:80:56:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=546cc015b6b36c840b4ade78ab845fe5087c307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:55:48:aa:d0:66:2f:c6:cd:96:56:85:c6:6d:
f7:08:b4:c4:39:db:8b:80:df:da:ab:f8:07:f1:5f:
49:29:ba:36:25:a4:f3:cb:17:b6:a3:4f:6c:78:1b:
73:63:a5:16:9c:27:1c:8a:85:1a:10:b8:04:3c:b7:
22:f1:c4:56:15:55:43:ba:a8:1a:0c:ee:49:fe:b6:
6f:48:ba:24:8f:fb:d7:f0:c2:79:59:4a:05:37:37:
33:b2:50:85:34:ae:e5:aa:c9:0b:a8:1f:e1:e9:46:
05:89:d6:ef:d1:b2:bb:44:b4:95:48:ed:9a:76:e6:
0a:21:00:93:e3:97:18:18:72:fd:45:1d:75:34:6d:
32:ef:4c:f5:0e:06:e3:fd:cc:91:da:eb:e6:a1:0a:
8e:91:db:4b:41:ab:6b:4f:2a:f7:9a:9a:9d:e3:77:
25:81:37:d7:74:9f:cd:81:f2:9f:39:00:5e:1d:0a:
78:b9:a8:7d:a4:20:87:94:8d:c1:2c:f3:9e:d1:d4:
28:df:3f:cb:2a:70:84:26:84:f6:9b:d9:fc:65:34:
bd:b4:88:5d:f1:cb:3b:6b:5a:0b:50:d8:7e:8b:e9:
3e:a7:33:5e:8a:d6:68:05:96:91:cb:5f:37:3d:cd:
55:38:2a:ae:c5:f1:3f:d4:00:51:f4:8c:ff:a8:3c:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:C0:15:B6:B3:6C:84:0B:4A:DE:78:AB:84:5F:E5:08:7C:30:7C
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ce:a2:1c:b2:c9:7e:ed:f1:0a:5a:16:54:f7:9d:6f:e6:17:
f3:94:01:17:39:09:bc:38:c1:60:92:ee:7e:68:d5:af:4b:af:
12:8b:aa:a8:ff:b2:c2:71:11:3e:55:0f:8a:49:20:0e:cc:33:
37:1f:b6:b3:eb:90:2f:cb:d0:73:15:08:a5:f9:57:bb:19:69:
8d:8d:2b:5f:fd:6e:be:24:31:77:44:b5:30:22:13:2f:e1:ff:
c9:d1:b6:a3:e4:2d:4f:e7:bb:01:9c:54:fd:cc:77:bf:2b:78:
3e:b8:83:a8:d0:fe:20:c2:e0:c3:c1:0c:ab:58:ac:05:fa:96:
95:17:21:79:d5:6f:28:62:59:1d:ee:87:bd:b4:29:8e:35:23:
a7:a8:fc:c0:be:c7:d1:6b:77:03:b6:2d:4f:c0:bb:f2:b4:f7:
90:58:e9:b3:f0:60:5a:1b:6c:15:7c:29:32:15:83:0e:f0:b4:
f5:03:48:80:65:fa:f1:5c:48:c4:54:75:06:1a:22:8e:ed:c4:
43:b0:88:d0:09:7d:5f:00:53:81:fd:bf:be:fa:c7:85:f7:98:
fe:33:26:fc:3a:18:42:74:24:49:13:af:cf:3f:e1:5f:4b:84:
8f:92:4d:1a:8b:71:f0:95:3d:b7:b0:9f:09:bd:95:01:27:a2:
3d:7d:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:05 2025 by rpki-client