Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: 07goPEbdBDB0mx7nuVm+B3MgK/lMD/CWhGMOZ9Z3RUA=
Subject key identifier: 9E:13:74:49:00:2B:79:4F:A9:E4:BB:B7:3A:E7:2A:B7:64:C2:90:51
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 0199FCC6A80A374D804BE70CED1A599297F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=)
2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=)
3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: TWren2oIgmH1+DaZ8KnTsH8sZc0f9cZvsdyCwAmgdp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a8:0a:37:4d:80:4b:e7:0c:ed:1a:59:92:97:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=9e137449002b794fa9e4bbb73ae72ab764c29051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:da:0b:61:6b:68:8a:18:91:c8:51:45:86:
43:f5:84:d4:7c:26:8c:6c:72:ce:3f:f2:7f:e5:9e:
77:ac:72:bb:d7:d7:f2:b7:95:92:33:9f:56:29:ca:
32:5c:b2:15:d5:cc:e3:f3:3f:2b:a6:5e:a4:7f:d7:
0a:c4:75:2c:f3:4c:44:51:c6:c4:19:16:d7:2a:52:
52:ce:76:33:82:68:6e:3a:b0:1f:3a:98:a6:72:89:
dc:f8:d8:a1:d1:06:74:4f:03:39:3d:23:d0:40:67:
a5:25:c9:f6:fc:8f:6a:9c:cd:41:c6:7c:c3:d3:58:
ad:c9:bf:40:59:cd:99:85:7c:a2:02:f1:c9:6f:7b:
a9:94:91:0a:93:58:0c:a3:58:3d:6d:1a:7a:cb:a4:
65:ab:14:a4:3e:e1:9d:4e:84:ec:7c:4c:60:0e:0a:
7e:18:62:df:85:aa:ba:6d:fe:54:3e:61:08:f4:db:
98:af:2b:c1:c9:e7:79:38:90:bd:b2:81:f8:cd:2d:
df:2a:ce:32:aa:47:c4:4b:47:0f:bc:42:6a:f8:72:
78:f5:95:0f:da:52:a6:0d:b2:f1:82:c6:57:a2:4e:
bb:9d:bd:84:b1:dd:ac:64:2a:01:f1:9b:9d:22:3a:
43:c5:02:77:a7:e4:9b:4b:de:33:93:f3:55:84:a5:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:74:49:00:2B:79:4F:A9:E4:BB:B7:3A:E7:2A:B7:64:C2:90:51
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:a9:8d:74:00:14:d6:dd:b7:9a:9e:a4:40:4d:af:aa:32:
ec:8e:29:10:60:ac:2c:49:8e:fe:e1:d5:70:e4:0b:94:e0:7a:
ef:5f:a8:08:9f:0a:5e:b9:a3:e9:4c:3f:4f:29:b3:78:67:3a:
e0:a2:c1:99:4c:81:c1:a9:61:cf:79:11:51:c1:e1:19:60:49:
c0:6f:bd:e1:de:b7:dc:e8:ae:f3:fd:9d:d6:50:a4:f4:82:bd:
99:5c:22:82:51:85:48:62:52:25:d2:51:47:91:84:06:6b:e8:
4e:f7:db:9b:02:fe:18:be:53:c4:6b:a2:c3:59:97:43:fd:01:
c8:4d:fb:fc:16:98:eb:9a:9b:ab:67:0a:27:4e:0c:e8:bd:fa:
29:a9:8d:b7:4f:f2:1a:04:f0:d4:88:9c:82:93:5c:d7:58:9b:
d4:1c:d1:bb:b5:c6:ec:88:04:d6:aa:cd:4d:34:f3:9b:94:53:
03:63:ed:c1:46:79:e0:3e:d5:97:54:be:2e:ed:c5:cb:08:6c:
21:68:d9:ed:8d:3c:16:d3:6d:4c:00:c8:e8:01:52:a5:4c:e3:
c3:5a:68:e1:c1:da:60:0d:1c:96:b9:aa:35:10:c0:2f:66:fc:
b3:2d:42:dd:84:91:13:b1:4b:6f:23:12:68:b8:fb:e0:a7:14:
e5:e0:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:53 2025 by rpki-client