Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: SVFTFwoYtBsofLKAaohI2kErlBKk2O9MUgTD4Sc4GHA=
Subject key identifier: 2C:F7:37:BB:2D:23:AD:57:C0:EF:F2:9C:52:27:9B:B0:E7:EC:43:4B
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0199FC218FBFC5322EC0254CF0CFBB4A1FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: fqQPUfrnWX5wnpW4+Io0cASzKWQ03bqcdDw1zV8afFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:bf:c5:32:2e:c0:25:4c:f0:cf:bb:4a:1f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=2cf737bb2d23ad57c0eff29c52279bb0e7ec434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:26:c0:94:f1:aa:b3:01:d4:94:bf:91:ce:
46:f4:78:10:25:98:87:5e:c7:92:8e:5e:8b:9a:4c:
e5:a1:35:5d:22:6f:3d:22:b1:2b:93:4a:99:29:88:
d4:f5:37:df:18:3b:d7:66:1f:a3:1b:ed:f7:ae:8d:
92:75:07:f2:69:c9:7a:80:be:5d:e2:32:23:d4:46:
69:e4:8c:2c:83:ab:8e:73:48:ad:26:30:1b:e4:01:
be:49:4d:a4:02:d6:55:1e:41:80:ae:fe:a2:10:6c:
b4:ad:fe:2f:fd:b6:72:e0:db:c8:d8:50:28:d6:e8:
09:f6:a5:c1:04:08:5f:1f:92:bb:4e:c0:f3:8d:99:
2a:c3:28:ee:83:77:dd:1f:44:ba:b0:78:e3:94:71:
33:54:d5:71:d2:34:ef:b1:a3:a4:56:fc:8b:bc:ee:
df:cf:de:3d:81:c5:f4:65:a0:5b:53:a7:ce:3c:f7:
de:38:33:4b:52:74:4f:86:2e:1c:1e:c1:87:7b:c2:
ba:6c:f0:99:a7:ac:23:93:33:0d:17:a6:e3:4e:7e:
9c:7a:7e:ee:bc:26:2e:d0:48:80:17:d9:15:ce:53:
32:c5:da:0e:6e:2b:b4:52:67:b8:e2:94:93:a0:cd:
c9:02:80:6c:d1:93:c8:f9:15:d1:27:6d:19:2b:d8:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:37:BB:2D:23:AD:57:C0:EF:F2:9C:52:27:9B:B0:E7:EC:43:4B
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:58:dc:a7:20:f1:80:8b:ea:b8:63:a1:d8:92:1a:b7:ce:
fb:22:b2:42:ef:cc:9b:ab:80:36:bd:2d:90:44:e3:1d:7e:d0:
22:8f:62:14:ba:e2:5c:92:e6:ab:f7:43:01:89:11:ef:c2:72:
bc:c3:29:af:31:c7:1e:0e:32:93:78:a0:7e:98:ce:c6:36:51:
06:26:24:cc:6f:1d:50:cb:93:58:0e:3c:76:79:5e:99:4c:40:
88:39:4a:7a:9d:4e:eb:dc:5f:56:a6:39:ef:e3:db:e4:1e:14:
56:c8:4e:65:f2:38:dc:af:04:c8:74:7b:02:2b:76:b6:8a:39:
ff:00:73:91:21:42:d3:91:94:2d:83:5b:0f:e1:ca:da:8f:82:
bb:40:bf:91:8a:41:a0:d7:7a:e1:c1:bd:20:94:cf:51:4f:a3:
cb:e2:1d:58:06:37:08:c6:e0:cc:c0:8c:99:95:20:08:13:f5:
61:c1:86:7b:58:cf:37:88:8d:a4:11:00:cf:27:da:eb:92:46:
dd:f9:99:f4:19:5e:53:b7:65:0b:55:ea:cc:2e:b9:27:0d:dc:
ec:62:a0:e8:77:ff:ef:09:4b:30:53:a1:40:5f:4f:64:a4:ac:
09:25:ca:9c:22:cd:b9:92:55:49:d2:4e:4d:22:0b:48:9b:43:
57:f7:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:43 2025 by rpki-client