Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: D3RKHvuNcdeQcvy0CQo3f7VlAQmcGtpiW5PFgZF0uK0=
Subject key identifier: 52:45:32:F8:15:34:CC:AF:3B:CF:CE:60:F8:18:61:5A:18:20:7A:DD
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 0199FE0FF51A7B3F670363ECD64083D578DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:22 +0000
Manifest this update: Sun 19 Oct 2025 20:01:22 +0000
Manifest next update: Mon 20 Oct 2025 20:01:22 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: jlfY2S18pF5Lwal8Ihgs0n43it51nVgPAjPIwbNSiEo=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f5:1a:7b:3f:67:03:63:ec:d6:40:83:d5:78:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Oct 19 20:01:22 2025 GMT
Not After : Oct 20 20:01:22 2025 GMT
Subject: CN=524532f81534ccaf3bcfce60f818615a18207add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:56:57:27:0c:fd:10:b2:0b:5c:4e:02:9e:
5a:40:fe:ec:55:73:6f:98:f3:0b:7e:6a:f6:d5:24:
83:c5:91:bf:48:49:0f:05:97:d0:46:1d:cc:a8:7c:
c8:1b:11:8c:93:2b:8d:39:ef:2e:ab:f1:a4:80:74:
2c:50:88:0a:95:d6:54:42:e9:26:79:66:0b:1c:a0:
ce:df:78:8d:b1:63:45:9c:c7:17:20:ea:c8:5c:31:
99:14:2d:75:f2:52:e9:b5:80:c3:fd:d2:63:12:24:
a2:f5:20:98:e7:5c:ee:25:81:4f:8c:b7:df:10:28:
64:6c:65:35:e8:cf:89:7e:05:86:99:a5:7d:cf:ee:
68:91:6c:21:ca:bb:af:87:10:1d:d5:e6:d0:87:6e:
bc:f5:27:e5:69:c2:a9:64:e7:a6:3f:58:92:82:5a:
11:b7:6b:99:6f:f7:b5:66:bc:a7:e1:15:cd:55:ed:
97:86:7b:d6:ed:10:e0:15:27:14:c0:39:64:7d:2a:
b8:b6:7a:34:49:1b:ea:79:ca:40:d8:bf:bc:71:e9:
74:34:1d:50:ef:20:f4:a1:52:39:db:b0:ae:cf:8d:
13:26:1d:7e:5e:40:5f:32:e9:18:4d:d9:42:57:ff:
4c:06:cc:5e:28:c0:38:8a:44:a2:12:16:92:cc:9b:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:32:F8:15:34:CC:AF:3B:CF:CE:60:F8:18:61:5A:18:20:7A:DD
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:97:ce:1e:3f:2d:4e:26:65:bb:7f:82:a3:82:36:8a:2e:
24:62:7d:bb:4d:f9:f5:66:88:9a:64:e3:4a:b5:4a:a9:f0:01:
6d:eb:44:b9:b8:da:4d:a6:d1:7d:a8:f9:2a:07:1f:a1:e8:d5:
97:b8:31:0a:42:cf:b6:6f:eb:bf:b2:56:c8:a0:8c:59:b9:67:
a1:d2:50:e5:ea:a7:90:51:0a:10:52:1f:13:be:26:73:fd:74:
78:56:43:3f:e7:88:71:40:4c:a0:99:88:78:b3:93:69:c3:c8:
c4:20:94:71:b9:64:ef:0d:a4:da:39:1f:4f:66:08:20:a0:10:
b5:43:75:b0:9e:65:98:de:3f:48:63:89:6d:25:0f:d8:27:ac:
6f:54:b8:06:04:75:c9:cb:f4:12:07:03:18:51:0e:66:34:75:
90:3d:13:3f:b5:d5:21:8c:63:09:26:f4:70:06:67:63:a6:2d:
2c:fc:b6:9b:cf:08:c8:dc:c7:3b:82:37:d6:43:76:dd:53:a6:
e2:0a:b2:8e:3f:e2:41:f8:cd:d7:db:20:28:ca:09:49:f1:ea:
e6:6a:bd:ef:08:78:cd:6a:a5:67:3b:ca:4e:e7:b9:ee:91:2d:
e6:e9:b2:e4:a8:51:ec:f7:7a:e8:45:73:55:15:48:28:b0:d5:
37:61:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:26 2025 by rpki-client