Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: 66ZYLBXbaycYwq18ZLT3tJ4poqyqTRePX/oiYTj3Maw=
Subject key identifier: 8A:22:FB:5F:81:2E:06:A2:DB:05:C9:14:78:ED:28:05:8C:33:6C:DA
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 0199FE1041BA4B53761EA6CAD3C658BCEC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 01F5
Signing time: Sun 19 Oct 2025 20:01:42 +0000
Manifest this update: Sun 19 Oct 2025 20:01:42 +0000
Manifest next update: Mon 20 Oct 2025 20:01:42 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: 5H1c77RA5JIKDbtniXmTCP5jbPWsU4EJYK7ckCCE7q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:41:ba:4b:53:76:1e:a6:ca:d3:c6:58:bc:ec:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Oct 19 20:01:42 2025 GMT
Not After : Oct 20 20:01:42 2025 GMT
Subject: CN=8a22fb5f812e06a2db05c91478ed28058c336cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:9d:45:0a:9c:c4:f4:0a:5f:0b:a8:1f:c7:
ad:d5:60:4c:de:e9:08:63:19:c7:cc:f4:cb:1c:34:
79:c0:29:f3:c5:2e:24:73:92:c9:bd:6a:9a:b7:5e:
11:b2:a7:ca:75:83:20:e1:d0:e7:d0:82:cf:8e:5f:
95:65:47:da:ad:72:65:6d:13:d6:b3:f4:1e:14:d1:
6c:c8:85:fb:f8:da:cd:26:90:34:10:02:4a:70:d0:
03:8d:44:db:f9:35:c9:bc:3b:46:3d:b4:c4:52:b0:
eb:a0:3e:68:82:b9:ef:91:9c:55:c8:0a:9a:9d:88:
f5:3b:74:89:32:a3:88:98:a0:1c:fa:b2:dc:42:1f:
80:70:7d:bc:6e:96:ba:62:de:0b:05:4d:ce:5e:7e:
23:62:2b:60:6c:84:63:f4:1a:68:62:0b:ce:4c:20:
24:82:3b:49:80:8a:16:ff:82:35:30:e6:de:aa:12:
88:36:58:e7:b5:1d:da:4a:79:be:6a:99:7b:42:81:
2e:49:82:f2:4f:86:f5:4d:6b:09:ee:21:08:2d:c9:
89:7f:f2:fd:1e:52:93:89:9e:e2:03:57:62:5e:4d:
88:b8:87:c9:e7:8c:c0:1d:8a:99:a6:b3:c5:bd:3f:
e3:4c:40:25:7a:8f:20:f8:bf:5e:0b:4c:ab:1e:da:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:FB:5F:81:2E:06:A2:DB:05:C9:14:78:ED:28:05:8C:33:6C:DA
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:83:02:0a:fa:ec:dd:89:e4:23:ca:9c:76:18:48:73:7a:
92:03:18:e6:f8:fd:a8:5d:7a:19:bd:1a:01:bc:b3:46:b9:f5:
e9:b6:06:85:39:ed:40:54:9a:25:b9:f0:f9:b9:a6:fe:1c:d9:
38:ca:f2:90:b4:05:99:a6:ed:98:ad:00:53:29:1a:15:4f:5e:
45:78:ce:8c:c2:1f:c4:94:e3:0a:88:4d:a1:f5:07:a5:a6:1b:
03:c9:65:b4:b7:a7:c0:80:76:39:03:8e:45:e3:b0:07:88:bf:
ca:a2:40:48:bb:9b:88:2e:5d:98:ac:98:77:34:b0:08:6e:09:
76:d2:0a:4f:b0:18:1b:61:bc:cd:09:09:16:18:b2:aa:db:dc:
a6:91:18:30:c7:9b:66:0b:3f:59:70:3a:a7:fc:74:0f:85:f2:
e6:8c:bd:11:90:82:4c:23:ca:49:58:d7:23:a1:85:d1:93:ca:
e3:83:58:f0:47:4d:1b:41:2c:d3:14:64:7b:72:c2:d3:fe:78:
ec:d6:8c:37:4f:b2:2b:ed:b4:f2:54:36:11:61:0e:c6:be:8d:
99:bd:ad:8b:57:b4:ad:d0:b4:11:81:17:2a:ea:1b:4a:77:2d:
3a:0a:c5:01:01:1c:e9:fa:05:90:59:60:28:6a:8f:a1:24:0e:
d1:bd:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:23 2025 by rpki-client