Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: 1PgUBxeBgH+XEdghpifBImEIAAfzdEsDDOEO2jPjX8k=
Subject key identifier: A9:84:97:5C:2C:BA:CF:1A:1E:37:5D:F4:72:75:93:43:9E:3C:9F:11
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 0199FC21B9B0FDD184531CD1ABFA1C4EB502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: +Er4qDg+Qsh9AudXQcyJD/doWjZBRaSjnRu2no0WjFk=)
4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b9:b0:fd:d1:84:53:1c:d1:ab:fa:1c:4e:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=a984975c2cbacf1a1e375df4727593439e3c9f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:d5:c1:ee:0b:74:63:8b:57:07:da:5f:0f:
dc:d9:69:11:7e:5b:e9:6e:6f:5d:5b:99:27:c6:1e:
98:95:3d:9b:00:e6:ea:e0:e2:d6:e1:be:54:94:db:
93:c3:c2:46:56:74:c2:d6:38:43:7b:ea:84:97:45:
dc:21:9a:4f:4f:b6:63:8c:e4:62:90:ee:0a:e6:36:
4e:01:e6:16:f5:a9:b4:3b:b2:0c:a0:1e:e0:81:a1:
3f:26:b2:e3:f9:01:1a:6c:17:fe:e6:fa:7d:4b:eb:
cc:04:e8:51:5d:aa:5a:30:2e:27:86:39:03:a8:62:
a9:6c:97:03:e4:3f:d3:32:45:7a:23:16:54:ec:12:
90:14:c6:ec:6a:c9:8c:f6:f6:df:76:5b:90:d5:14:
f6:64:4d:13:f3:0e:c0:8a:45:f7:27:0a:91:c4:b2:
50:c0:d9:37:b1:38:60:68:ee:e3:05:96:9b:f9:43:
be:cd:4d:22:77:89:ff:52:8e:74:12:c3:eb:11:bd:
3f:c8:af:5f:da:c9:e8:02:72:3b:f2:d9:7f:44:9e:
a0:24:f4:75:0e:94:e5:ca:cc:4d:ae:40:62:49:b6:
58:42:16:58:10:f0:aa:00:43:80:19:cc:5f:2a:73:
10:24:d7:88:93:ec:ea:4c:f2:46:d7:76:87:70:fe:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:97:5C:2C:BA:CF:1A:1E:37:5D:F4:72:75:93:43:9E:3C:9F:11
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:cb:34:46:a5:68:d6:d2:80:08:65:08:bf:41:7c:85:6f:
db:bd:23:09:9e:08:13:2a:d7:3d:d9:97:12:ce:d1:10:fc:3e:
ba:2e:da:70:50:27:dc:4a:8c:26:b8:0c:10:7e:03:cf:f9:df:
22:6f:aa:7a:ff:b2:b6:e5:e4:48:50:40:84:e0:cb:90:ff:6a:
0e:40:32:7d:e2:01:c0:a5:0c:f6:53:5b:ee:e7:84:ef:e7:9b:
f3:0a:f9:7d:13:d9:04:88:9a:0e:7e:56:e4:1f:3f:05:a8:2d:
2d:d8:f8:96:38:10:4f:6f:3e:82:b8:a4:05:32:37:ee:5a:d9:
27:7c:fd:c9:6b:c0:55:16:a7:9b:1f:89:52:bb:67:a9:6c:13:
a6:28:cb:96:36:89:8a:7a:50:a9:08:b7:4a:f9:80:59:62:22:
ce:f7:b1:fc:8d:9a:89:e8:6e:70:8f:5f:e0:29:fe:4e:95:20:
5a:25:ce:c5:5b:f8:ee:e4:35:e6:8d:5a:9b:8e:3c:21:a7:3a:
aa:ee:c6:80:ed:56:3b:33:d8:74:a9:83:69:7e:6e:f5:7a:19:
3b:2f:54:bc:05:67:e5:5e:1b:79:24:9e:42:9d:25:22:06:2c:
76:83:b0:27:95:f4:a1:13:e6:fd:73:27:e8:0c:c6:a3:8e:11:
e5:2e:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:39 2025 by rpki-client