Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: M4bfbm0H9kyZfNzy9vEprX5hseRxDUVNoP79mAYrUn8=
Subject key identifier: 97:68:DC:50:6A:C3:A5:E6:50:AF:8A:D3:8F:C3:CF:C8:30:00:C5:ED
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 0199FD342C10CDA8A571F6B6EFA2C25E4B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 05D9
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: Uz8B/dALbzWUlqaSRybJLBYUT2cItRSPVQ77xRYe6BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2c:10:cd:a8:a5:71:f6:b6:ef:a2:c2:5e:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=9768dc506ac3a5e650af8ad38fc3cfc83000c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:60:a1:24:2c:9b:58:6e:b4:e4:b8:65:3e:
72:ea:be:4b:9d:87:50:c3:66:bf:d8:a1:c4:a6:09:
85:78:ba:f9:54:4e:30:ec:be:79:02:ef:06:1e:72:
d7:c8:dd:04:22:bd:e2:65:84:16:3f:c6:e5:cd:9e:
3d:48:1b:55:3f:fc:aa:47:18:e4:be:b6:5b:7f:df:
b6:66:09:c3:4a:26:68:1e:78:c5:3e:2d:30:70:ec:
cf:8d:a1:94:0a:37:07:b1:c6:73:b4:52:b8:5f:38:
63:c6:2a:e8:e2:41:74:b8:24:f4:6a:4e:c3:32:aa:
8a:5f:b1:02:02:0f:01:8a:28:7b:13:37:78:b5:62:
6c:3a:f9:61:0b:25:44:2d:c4:08:c5:82:0c:16:f0:
82:a9:00:2b:16:df:af:98:82:ea:6d:4c:36:c7:83:
87:b1:73:ae:c2:36:2b:e4:ce:d5:b7:26:de:48:55:
89:cd:f7:7d:30:85:5a:40:84:88:96:27:a1:5d:2c:
86:4c:89:fd:a0:5d:01:30:d0:54:06:8f:80:eb:f0:
14:d4:6f:eb:21:8c:0b:00:4b:86:15:8f:e1:c2:29:
cb:db:7d:62:80:70:d8:4b:58:cb:71:71:aa:62:47:
a7:26:c2:27:47:2f:a1:65:e0:91:e6:bb:4d:41:7f:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:DC:50:6A:C3:A5:E6:50:AF:8A:D3:8F:C3:CF:C8:30:00:C5:ED
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:8a:40:0a:d0:43:83:31:3c:4e:22:77:8c:75:50:60:91:
39:2d:ab:a5:38:54:f0:29:9b:37:c9:6f:21:9d:a8:7e:b5:be:
52:15:51:2f:0f:e7:bb:24:1b:70:02:1a:92:a9:0a:94:2b:00:
42:54:21:a9:66:06:55:a4:05:86:63:d7:43:50:50:d7:de:99:
b1:cf:ff:83:af:14:07:ce:06:33:41:40:bf:23:b6:18:0e:a2:
e7:0f:d7:a1:0a:2e:2d:fd:8e:d5:64:c9:be:7f:4e:9f:cb:50:
e6:61:b4:bf:13:d7:c0:d3:23:37:c7:e0:07:f7:b3:0f:24:42:
05:b7:8d:f7:04:b6:a4:91:7c:12:22:ec:e7:2c:00:99:3d:8d:
db:c8:fa:bb:a0:9b:68:56:05:20:ec:21:66:68:fa:5c:cc:48:
7e:e5:ff:ab:e9:bc:7d:14:93:b6:e2:e1:30:f8:fd:36:83:9c:
65:73:9a:ab:04:81:bf:25:8d:89:9b:13:88:e3:54:e1:e3:47:
e7:47:cf:f1:95:82:a2:0a:38:cf:c8:73:8f:9b:1a:cd:5c:c5:
f5:f3:41:10:54:c7:0d:91:b0:6a:43:5e:96:70:ac:d8:65:3c:
0a:64:69:70:89:ca:83:b4:02:c0:55:d8:ce:2c:45:93:af:fc:
7a:f6:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:37 2025 by rpki-client