Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: 49pSH/YB9i18+b3q/Y/JFoioDy7HpX1H4oLPL+aFff8=
Subject key identifier: 77:7A:1C:AC:03:47:4F:1D:AD:CA:EB:6B:81:09:8E:4D:EE:7B:5F:BD
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 0199FEEBC935C727D560B2B076E3AC735F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 00:01:29 +0000
Manifest this update: Mon 20 Oct 2025 00:01:29 +0000
Manifest next update: Tue 21 Oct 2025 00:01:29 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: SpRJNMTycXbZwmHH/cU4ob7J9iwbizR6zTCE4kv3Xsg=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c9:35:c7:27:d5:60:b2:b0:76:e3:ac:73:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Oct 20 00:01:29 2025 GMT
Not After : Oct 21 00:01:29 2025 GMT
Subject: CN=777a1cac03474f1dadcaeb6b81098e4dee7b5fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:fd:b9:8f:43:0a:a9:c9:1c:b6:b3:83:0a:
9c:b3:03:ef:7b:49:79:5d:af:48:f6:f7:14:f7:8a:
35:7e:57:a6:a8:8e:e1:ce:b6:8d:8a:61:45:fe:8b:
8b:a1:54:76:18:61:7b:48:af:8b:5b:01:0f:28:7c:
f2:09:2c:46:82:34:08:6b:38:cb:82:09:c1:9e:f0:
a3:1d:94:6d:33:9d:00:ed:d7:b7:d8:6e:48:3f:02:
fd:9f:44:2c:26:b3:c2:a1:0b:c2:97:6c:af:b4:54:
73:cd:c0:01:fc:3d:f7:1d:f4:94:2d:f6:63:c2:c6:
12:ca:92:7a:8f:1e:30:f7:7f:15:ae:cc:80:ab:97:
b3:5a:b2:31:39:d8:0e:1d:34:f8:95:49:e2:30:62:
24:1f:90:d6:47:35:c5:23:90:7e:cf:5e:61:d1:76:
51:f0:31:6c:b4:05:80:59:88:41:f7:62:db:e1:75:
7f:ab:8a:c4:e3:ec:2c:be:c1:f5:43:37:7e:df:5f:
5d:65:cd:45:db:61:7a:03:c9:14:36:21:cf:ab:2d:
3d:c6:53:1d:59:9f:33:d3:94:18:cd:15:03:01:a3:
77:43:60:32:c1:35:a3:c4:dd:01:9b:78:c5:4f:a8:
8d:e0:4a:81:70:da:91:2c:78:21:55:1e:37:5a:95:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7A:1C:AC:03:47:4F:1D:AD:CA:EB:6B:81:09:8E:4D:EE:7B:5F:BD
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:3f:72:27:19:83:27:14:65:6e:b4:af:80:8c:7e:87:b9:
2b:86:de:21:a6:c0:70:b4:89:bb:82:34:3a:eb:ec:26:8a:74:
95:d6:4f:46:ca:29:2a:f8:d5:a9:3d:64:eb:54:01:8d:8b:38:
40:32:06:33:a8:36:19:db:5b:a0:5e:15:44:c0:47:f7:0e:4f:
72:f8:a6:be:f5:fc:62:1c:c4:95:2a:c0:23:63:01:ae:79:5b:
9e:86:b9:75:1c:02:85:99:6d:46:23:db:e0:4b:38:13:03:2a:
9c:2b:30:88:80:9a:55:8f:72:a7:2a:03:17:c7:c5:bd:10:dd:
00:38:05:24:7d:25:92:bb:42:30:71:c6:8b:94:8d:9b:60:02:
4f:7b:af:85:3b:7b:25:aa:73:e2:24:49:81:36:ea:56:4b:2d:
ba:c0:67:51:ca:4e:d7:e1:3e:df:38:91:19:92:93:23:7e:9f:
25:76:07:58:6d:21:f6:6d:cf:47:66:02:a6:6e:45:14:38:66:
85:38:49:db:a9:b0:4e:26:e3:fd:91:ca:82:98:3f:bc:13:b0:
1c:a5:37:99:da:c1:d4:e4:aa:78:bd:b0:89:8d:12:f9:69:94:
8b:ff:c3:a4:99:49:15:06:85:71:fb:aa:9a:74:21:40:ba:5e:
93:72:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:05 2025 by rpki-client