Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: lCUCCMRp1U9TD4OwSLFdVoS7v/vcVvHyEEBdiI6nzBM=
Subject key identifier: 77:BC:E2:E4:14:25:42:00:0C:78:64:BF:DB:C8:54:99:65:9A:42:24
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 0199FB45ED8641C911AA9813367A9A6576ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
2: JBF4nmB_9dA41I4-h-2ocy7VHRY.roa (hash: TnEvzmeVW0oV1dW+VOZZ6uxDCsLJLLDwXJNqVjj4CQA=)
3: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
4: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
5: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
6: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: AjzfveYRXrm4RFQgIpTtc7ouSG2frCyQGvc2XzWYHJY=)
8: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ed:86:41:c9:11:aa:98:13:36:7a:9a:65:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=77bce2e4142542000c7864bfdbc85499659a4224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:67:01:ff:b7:60:b7:de:24:40:02:c8:08:
54:0c:db:8e:0f:13:bd:a5:80:a4:d2:1f:19:f7:eb:
49:d6:95:a9:fe:54:b4:de:7c:4c:61:3f:13:b6:c8:
d4:f9:78:c8:6a:35:9b:8d:d4:32:e3:3c:a0:ec:a4:
3f:c4:73:e0:86:ee:78:e9:0c:5c:7a:0c:6f:c0:0b:
7a:bf:2b:27:15:88:0c:d6:d4:1d:31:39:85:1d:bb:
84:95:c3:a9:1a:cb:c9:a6:69:f4:b3:c1:30:65:ea:
39:ab:bd:02:8b:db:e3:5f:ba:3c:13:4b:70:91:b0:
65:9a:a8:2e:1f:de:43:79:cf:fb:bd:fc:f2:7a:1d:
06:00:c0:80:c4:8e:dd:d4:60:e6:71:f4:00:d1:7c:
67:b9:d6:62:62:23:2c:2d:87:a2:a9:ea:2d:bd:74:
8c:5e:a1:4e:73:05:a2:9c:4e:c4:5c:76:c1:0e:89:
c8:30:47:a8:64:cd:a5:ff:da:b8:16:ae:12:95:df:
1d:22:be:44:3e:13:f2:9b:0c:4e:f5:eb:79:2e:35:
98:92:1d:bc:12:73:e9:76:a3:2a:f5:89:12:c5:99:
b5:03:11:8c:ef:ba:e2:fe:2f:10:99:0d:88:ab:d7:
45:a2:21:06:d2:71:9b:05:92:63:37:a2:7f:a4:02:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:E2:E4:14:25:42:00:0C:78:64:BF:DB:C8:54:99:65:9A:42:24
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:08:41:39:35:d2:5e:9c:43:32:73:e2:8e:39:43:22:f5:
b5:fa:ce:e9:f6:2f:13:e5:77:a9:1b:45:8f:eb:0a:ca:67:ed:
0d:85:e2:e5:85:01:8d:dd:0c:e6:da:90:c4:78:7e:82:35:c1:
15:1e:57:1b:eb:32:e0:71:dd:9d:ff:58:c0:9c:83:72:fd:d2:
66:1a:22:20:e8:16:b3:96:5c:ff:4d:ef:71:4b:b7:97:31:ca:
56:96:18:a6:06:72:5c:0e:0b:c5:9c:88:ce:37:04:3c:f5:75:
8f:c5:81:25:24:2c:c5:ab:97:18:a6:f4:07:ae:2c:a5:3a:ea:
fe:7d:d8:b5:30:52:f4:c4:68:ef:15:4c:69:b4:01:4f:ef:0f:
da:ad:41:34:3a:7f:f5:41:0f:7e:d1:0f:b3:fe:da:2c:21:0e:
f3:5f:b1:69:93:a4:81:41:7a:ab:21:59:17:ce:ce:f2:08:e4:
66:32:3b:08:58:8f:c0:19:31:17:48:13:07:6b:e6:cf:9c:d2:
ea:48:74:b3:ba:db:9c:6a:83:50:ff:28:53:9a:44:25:ac:05:
ac:07:68:c3:f6:6d:c6:be:9b:a3:27:b8:e8:9a:70:d9:db:97:
d8:60:d0:a0:af:e3:0e:fb:00:e3:4b:a3:8e:e7:31:20:c2:4f:
a4:ab:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:27 2025 by rpki-client