Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: DCRld+/14DU7V+O2T1bbDFGzdsn89E6gRDNyYmry07g=
Subject key identifier: AA:FC:2C:09:FB:17:C3:FF:05:20:32:83:F1:96:40:A9:75:B2:63:30
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 0199FDD94A937C6A52CF89442A94D50F6856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: TPoshoZzupYiW6Qt2LjfBnlowPLxW8ZftQ6gAq8YiIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4a:93:7c:6a:52:cf:89:44:2a:94:d5:0f:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=aafc2c09fb17c3ff05203283f19640a975b26330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:27:7e:74:1a:b7:09:b3:b4:ae:fe:b2:e6:
30:d2:c8:ec:55:75:27:e2:cb:5b:06:c4:bd:c8:93:
9a:af:8a:08:d5:73:73:c2:89:7b:81:09:aa:53:51:
a7:fd:65:e5:9c:66:1a:f7:0b:e1:ed:b2:a6:14:40:
d8:67:01:a9:5c:fe:0b:ec:0f:76:e4:e0:64:dc:c6:
da:fe:aa:7c:bf:fe:e6:98:81:2e:1e:12:45:94:34:
df:03:55:e1:ff:d2:fd:2d:4f:02:82:53:53:28:bb:
ac:5a:4f:d2:ef:03:e8:a0:e5:04:18:d2:e5:15:b2:
0a:21:f1:a3:78:a8:d8:bb:96:f9:b2:c9:c1:64:50:
ca:60:75:a7:aa:17:0d:f3:8b:1e:75:ef:7a:bb:3e:
ef:70:98:12:64:6c:39:e1:d6:24:9c:3c:46:1d:19:
b7:97:38:9f:a9:a8:f6:95:1f:f5:3b:46:46:18:76:
34:6e:82:ac:c6:3c:bd:36:b4:36:22:78:38:7f:b7:
05:74:76:40:27:73:48:8b:e8:97:ef:cb:54:79:6b:
3e:1a:df:0b:b4:af:da:b6:d2:c6:31:db:c4:c6:a3:
28:c0:d9:0a:e2:9d:05:cd:91:8a:a3:7f:92:81:7e:
ef:07:57:10:c3:e4:0b:a9:59:1d:0c:b6:12:64:26:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:2C:09:FB:17:C3:FF:05:20:32:83:F1:96:40:A9:75:B2:63:30
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:60:80:3c:7f:36:df:b7:9e:ee:9a:fa:71:8b:20:32:2e:f1:
9b:7b:3d:78:c7:59:f9:24:3b:78:e3:7c:43:47:06:87:ba:a3:
70:db:eb:72:3e:48:9a:b1:0b:1b:9c:3a:55:36:55:a2:63:d8:
2f:58:d6:ae:6e:18:ef:4d:28:4f:b6:89:b5:b2:a7:27:c0:57:
88:2a:30:0c:bb:a5:55:1a:8f:fb:9c:0b:c1:aa:23:9f:e9:da:
1e:57:24:33:a1:d3:c3:15:15:f3:95:e9:2d:50:06:ff:1a:6f:
84:29:1a:f0:c9:de:26:56:49:6b:b1:eb:aa:3f:5b:65:f3:f6:
df:fb:b3:91:be:71:df:66:6b:ab:b8:bf:d9:97:ed:9e:37:d9:
88:94:f5:ca:27:1b:05:8c:d4:e0:3d:1e:31:8e:be:07:c9:1a:
88:11:90:f6:59:77:4f:80:9d:76:f2:89:55:8f:ea:67:ce:aa:
51:a4:2b:61:5b:59:aa:01:35:49:0c:ab:0a:de:c0:29:12:fd:
4a:75:5f:38:1b:3e:84:f9:d6:13:ae:63:9a:48:65:e7:41:ea:
90:0e:c5:df:6a:15:e8:fb:bb:16:c6:78:68:1f:93:54:ed:54:
50:63:24:41:57:62:10:da:35:8c:c6:7e:c2:55:ce:52:a7:42:
0e:52:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:34:09 2025 by rpki-client