Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: hpoN23PsQaAaZK5eFteg4Mt+xhabHNJuKGjJxqqIQzQ=
Subject key identifier: E9:5C:E7:F3:AA:D2:4D:3D:C8:39:18:A0:2E:EF:06:2A:AB:60:EA:BC
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 0199FDD91A950A61C03A0DC4224787CFDE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: mr/gm2dBDKAZocLZveAJuSOmefhXenyRGki0Hq13Pq4=)
2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1a:95:0a:61:c0:3a:0d:c4:22:47:87:cf:de:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=e95ce7f3aad24d3dc83918a02eef062aab60eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:78:6f:63:8b:eb:a0:c0:b0:93:ce:1f:11:
1c:0a:d9:06:1d:75:dd:d5:87:b0:2d:97:b7:65:20:
2b:79:83:83:3a:79:26:87:a4:dc:9b:16:88:f1:88:
54:80:12:24:3b:cd:d9:f5:2d:5d:07:67:7a:3d:72:
88:a3:2b:41:b9:41:98:db:a0:d4:cc:ed:63:57:63:
cc:9d:7e:0f:43:dc:d0:be:47:ae:58:f0:83:21:88:
23:6a:28:25:76:7b:a2:00:c5:d0:c5:d7:52:08:41:
5f:43:c9:53:5a:df:d4:c2:0b:53:84:f8:39:6b:93:
9f:fb:35:f5:e6:de:99:ce:0c:dc:df:b8:f1:db:34:
f7:e0:85:1b:95:b8:bc:c1:da:a2:b7:99:f8:75:57:
c8:e1:d3:39:2a:9d:fa:af:c9:39:e2:75:4e:23:c6:
2e:23:b3:32:b5:d0:91:85:a3:c3:14:3a:36:68:9d:
96:ac:28:cb:38:e7:ad:4c:6d:ce:77:80:2b:44:5f:
34:12:51:12:99:b6:4a:65:fe:1e:c3:9e:75:b7:07:
9a:fc:e0:93:92:7f:8f:36:f2:a9:88:c9:35:80:03:
d0:e9:f4:a0:ef:b7:d4:81:72:00:4b:e7:e1:d8:41:
70:6a:33:9c:3e:3c:cf:2f:84:8b:57:bd:08:1c:10:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:E7:F3:AA:D2:4D:3D:C8:39:18:A0:2E:EF:06:2A:AB:60:EA:BC
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:b3:23:9c:4d:3a:d5:93:8c:e7:59:0e:ce:81:1d:ee:b7:
f7:95:7d:6d:62:a6:4f:ce:77:a9:8c:61:b3:1a:11:b0:53:b2:
bc:cc:d0:cd:3b:d2:c2:66:4c:79:39:80:35:5a:2b:40:44:16:
ea:8f:1d:91:0f:c7:3e:ca:48:7c:c0:f4:b4:37:18:c2:16:1b:
2b:8e:09:82:a0:54:2e:53:ba:83:3c:75:8a:18:98:a0:9e:65:
b8:0c:cf:ef:2a:d9:6d:0d:7e:88:a3:3e:77:79:90:d2:57:9c:
3c:46:77:97:35:e4:d9:c9:77:04:b9:62:1d:10:32:7c:d1:bf:
a9:16:c5:60:4a:bc:20:37:72:4b:5e:8b:91:76:fa:12:3e:d9:
29:b1:9c:4b:42:91:2d:8b:bc:89:fd:04:ca:c9:d9:cf:cf:03:
26:9b:fb:64:f8:59:ee:38:d5:bd:45:35:92:0a:a3:07:1f:f3:
82:b1:29:52:62:18:81:9d:c9:c4:dc:99:c7:50:22:38:d1:26:
76:8f:5f:03:eb:64:77:e5:63:16:de:24:b4:6b:30:fc:a9:34:
e3:51:a5:c4:a5:4c:e0:df:b3:c0:47:74:93:ad:66:00:4f:ac:
ea:57:64:ab:39:d8:6f:0b:09:bb:7c:a0:42:11:ee:02:da:b8:
26:a8:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:59 2025 by rpki-client