Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 7510hY6wQGLZiZHJRh95xmO1JRkncxJCqJnCR9Ai8D4=
Subject key identifier: 0A:6B:67:F3:1C:0A:8C:02:D9:35:AA:DC:F3:F7:B8:D9:2C:9D:69:E0
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0199FDD9AD3601E8B9269724B5D7461BB3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: xx9zLMjD37oOGLG2hKvzMl1Xnn2gPmggtGaAUB2eqsY=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ad:36:01:e8:b9:26:97:24:b5:d7:46:1b:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=0a6b67f31c0a8c02d935aadcf3f7b8d92c9d69e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:90:e0:a5:74:07:f3:a3:cf:df:0e:22:30:
b1:29:03:34:03:9e:7d:58:47:3c:17:e9:04:e5:b2:
2b:c9:b4:bf:55:78:14:64:c1:f2:dc:78:e8:e1:82:
67:f4:cb:33:74:03:77:78:dc:0b:87:d3:cf:65:e2:
60:67:37:9f:a4:38:dc:85:ee:f2:e7:01:c7:68:da:
a4:fe:38:5f:35:ae:ee:7e:83:b6:be:f0:75:f1:2a:
2f:78:95:58:9e:c4:26:58:d8:39:d7:ac:42:9e:da:
25:f6:60:74:e4:42:bf:6a:02:64:05:a9:21:41:b0:
ca:8d:ca:0d:a5:6d:57:ec:34:ed:e3:8b:85:f0:1c:
f2:93:19:bb:d6:8c:ae:e5:fd:d7:a2:22:3b:37:0e:
f9:0f:b8:a1:db:60:f8:d6:fe:51:22:d5:d4:b2:ff:
5c:1c:f5:03:62:1e:67:97:a8:61:6e:66:1e:a8:b0:
a1:4a:21:f8:86:ff:ce:d6:89:0e:b1:65:4a:3c:0f:
7a:51:03:bb:9f:58:76:6e:0c:98:4c:71:02:7d:2f:
e0:51:60:9f:91:f0:f0:ed:fb:ad:e0:41:85:27:e3:
78:d3:50:73:2b:ef:fc:09:69:c2:ac:7a:51:a6:bf:
6f:d8:86:a6:a1:30:7b:6c:f1:e1:63:4b:2d:1a:04:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:67:F3:1C:0A:8C:02:D9:35:AA:DC:F3:F7:B8:D9:2C:9D:69:E0
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:a4:b3:42:d3:6e:0e:ad:15:35:06:f9:45:74:5a:9d:a8:
0a:cc:d1:78:73:6b:f2:c5:de:db:82:1f:1d:76:d2:e4:ce:97:
e9:10:40:7f:c4:f1:6f:42:4c:e5:af:4b:8c:32:39:70:60:d5:
fa:07:b5:0e:84:52:4a:8d:fe:9c:dc:70:b9:40:13:23:59:eb:
e8:af:4a:b2:22:58:c3:07:53:e2:77:da:ad:ed:82:a7:7d:37:
b0:94:69:c5:2b:d3:0f:79:aa:2e:99:3e:46:fc:0d:86:58:2b:
e7:dc:2c:0c:4e:99:52:d9:49:e5:20:d8:cb:99:0d:44:8d:34:
96:0e:6d:c4:be:c4:9a:c7:de:c2:13:4e:89:f8:3e:7e:6d:bf:
7b:9a:fb:30:de:13:f2:6d:6a:88:f4:ed:79:59:c6:e0:fa:2d:
5e:99:9d:6a:a9:a2:fd:9e:d8:bc:83:8f:2f:59:f1:49:5a:1f:
4a:4d:b5:ee:92:31:23:ac:8d:a5:84:aa:d3:94:f6:b6:43:59:
27:cf:92:7a:b6:1a:d2:05:be:e2:40:88:d3:90:ad:dd:50:4f:
6c:47:10:a8:9b:9d:05:66:cf:43:08:44:f9:b7:5d:35:7a:9a:
25:bd:47:6f:ed:50:15:73:73:dd:56:1b:54:84:f1:0d:fc:75:
78:5c:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:23 2025 by rpki-client