Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier: aekiVktlk0/xDHGWOpOEPU2/XOPsBoksd4hzN5KPD68=
Subject key identifier: 16:FE:8C:9B:58:24:DA:A6:9D:17:29:15:1D:38:C3:45:2D:3E:98:8F
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 0199FCC61A27228A072E2ADCD80BED6AE9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number: 0CA8
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: 4fzJ3P5yyj9liajA836eWjzkjwG1fXop2sxu4CjCYjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1a:27:22:8a:07:2e:2a:dc:d8:0b:ed:6a:e9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=16fe8c9b5824daa69d1729151d38c3452d3e988f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:01:30:c9:ca:5e:2c:74:62:e2:f9:ee:ea:
57:4d:de:bd:dd:89:d5:ca:8e:25:98:92:87:70:21:
89:dc:a8:c7:27:c6:58:66:4b:f2:98:35:54:d7:d1:
78:1e:ae:bc:01:4a:29:47:6d:2e:a3:1c:01:ae:dd:
ed:24:92:3d:a7:13:34:7c:31:e4:d8:51:2c:91:9b:
aa:49:dd:ab:5b:6a:a1:68:39:2d:5c:e0:4a:d5:93:
cd:78:6c:bd:f4:44:d3:8b:73:72:44:d8:ee:a9:69:
06:9a:a8:09:40:0f:99:d7:60:3a:93:3e:69:be:de:
a6:17:92:ad:9c:b4:2f:40:f1:de:9c:67:f2:2e:29:
65:7e:d9:85:7a:6a:85:49:cb:b6:06:ff:da:21:d5:
a8:89:83:12:f7:55:ae:7b:01:f7:0e:76:4e:cd:96:
f2:b1:7a:92:0e:b7:fa:ea:5e:21:f7:ff:a9:1d:b9:
93:8b:95:63:24:bd:bd:04:91:2d:9d:a3:fe:b9:1a:
93:5c:b1:fb:bb:c8:bd:17:5a:58:e1:9c:3b:9f:40:
fd:6d:dc:52:1f:3c:e5:dd:f3:90:d3:a3:20:67:75:
2e:9f:68:76:f9:7d:8a:8f:e3:ac:a6:8d:d1:c8:42:
40:77:84:1b:86:b8:a7:ce:9b:a4:a8:18:95:33:2c:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:8C:9B:58:24:DA:A6:9D:17:29:15:1D:38:C3:45:2D:3E:98:8F
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:5a:cc:bb:90:a6:06:94:e4:0e:eb:fb:e6:8c:4c:56:57:
f2:5f:6c:65:99:73:bb:20:b7:e4:d0:65:4a:84:5a:66:44:18:
92:d3:70:5a:3c:c2:04:dc:8a:aa:20:7e:0d:88:f4:47:e4:54:
d2:b7:92:1c:2c:1c:5d:1c:08:77:51:f5:08:76:81:de:67:e2:
28:4b:57:65:27:66:ef:7d:21:d6:59:91:23:a5:f1:ac:72:23:
7d:8d:ff:b5:98:88:bb:72:cd:e5:99:72:e6:59:c1:46:31:fc:
22:e7:1f:f5:33:69:f7:69:75:80:7f:1b:61:f2:74:1c:e3:e6:
61:76:a4:91:13:19:79:d2:5e:f6:8a:2c:f6:2d:af:1d:f1:16:
9f:1d:0e:73:37:10:72:ea:09:f7:15:65:e3:16:54:3f:a7:f6:
b0:76:60:75:cb:8a:bf:68:37:28:99:8d:e9:66:b6:c1:09:20:
ca:69:b6:9d:64:8f:a9:2a:79:b1:a3:96:69:6e:a6:dd:4f:6a:
88:e4:a0:d6:d5:8a:bb:e4:6d:81:97:20:5f:3b:c4:51:5d:35:
8e:4c:16:13:17:26:ce:dd:d7:03:58:c4:8c:e0:d8:7e:ac:ae:
07:6a:5c:b3:5d:db:3d:b2:66:b0:ac:d6:1a:18:bc:27:ad:62:
ca:08:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:09 2025 by rpki-client