Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: W/DWDiV3vSigIMVsvXvPPyDhydeHVX5o5b5N4LVz8Es=
Subject key identifier: 7B:FD:63:7F:88:AE:E5:C2:89:D4:EB:2E:FA:A0:74:F3:80:B4:3C:1D
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 0199FC8F98BE85371AF78FBF1AFD3D82EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: XRcAioElZEJnsFrh9xvkMxYp8hjuKNYPZTiAH/DOvys=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:98:be:85:37:1a:f7:8f:bf:1a:fd:3d:82:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=7bfd637f88aee5c289d4eb2efaa074f380b43c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:cc:53:9a:28:1a:44:3b:2a:8d:3c:c9:d8:
46:a8:55:92:48:d8:e1:6e:db:87:af:c7:83:16:ea:
68:0a:fd:94:e0:7c:f9:94:91:05:9f:6c:89:03:c9:
03:79:1d:62:b5:17:ba:39:95:aa:7f:38:28:78:51:
4e:c4:eb:6c:f4:28:b9:5c:10:b5:ee:60:9e:64:36:
a1:f1:51:fe:40:79:0d:71:ab:4b:4a:de:0f:90:4c:
e5:e7:9e:bf:06:5d:56:5c:96:25:cf:af:88:b9:be:
70:0a:c1:a1:8e:58:a7:a2:a1:a6:e4:a3:d7:71:6e:
a7:61:9b:df:28:5b:bb:c9:a8:25:f1:b8:ce:23:9b:
96:ac:3c:a4:2b:2d:96:9c:8f:22:61:d6:50:ae:65:
92:7b:8d:0c:d1:65:d2:74:d4:01:53:33:27:be:97:
4b:40:4d:ea:4d:ba:cf:cf:db:2f:32:31:64:a9:30:
33:de:ff:9c:3c:96:59:de:6d:cb:9c:8a:2e:28:70:
28:7f:12:35:68:60:3d:3e:6c:9e:00:df:bd:9f:00:
27:47:3c:0f:18:9a:63:e1:2b:d5:f0:50:19:1c:24:
ca:b1:ba:7c:66:1c:b1:00:04:af:3f:6c:92:27:63:
49:65:40:e7:a7:e0:c3:7c:35:57:02:0f:f1:87:33:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:63:7F:88:AE:E5:C2:89:D4:EB:2E:FA:A0:74:F3:80:B4:3C:1D
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:9b:91:56:fb:2b:56:a2:de:b4:58:3d:54:83:a8:ab:67:
10:8d:00:d5:b8:bb:af:41:15:b6:b6:54:6f:97:3a:39:88:5c:
f0:b4:2b:71:cd:24:8b:5d:51:21:85:d7:a5:74:0b:e2:63:38:
37:51:e8:ec:93:e9:00:86:d4:a5:a3:5e:b6:51:0a:4e:99:90:
e9:a1:8b:71:81:f1:91:fc:8a:87:a1:06:9a:b3:53:04:c7:07:
98:0c:b5:61:bf:bd:42:f5:ef:95:90:b0:57:35:8b:00:98:a5:
9f:aa:13:4b:85:ba:c8:33:2f:62:a8:82:36:3e:ba:c9:b0:1c:
3c:8f:6d:db:83:27:03:a0:8e:51:83:02:84:24:f1:d7:4d:02:
86:8c:db:d2:35:b3:ef:8f:96:41:a4:1d:b2:68:f7:fe:7a:8a:
d7:cb:3b:e6:95:4a:6c:ea:18:1f:1c:92:92:b8:9a:dc:63:01:
e6:70:fc:55:ac:55:0e:82:c3:b9:ad:9d:e4:e1:0d:8d:14:f1:
b3:f2:29:7a:8d:98:2f:a0:59:3b:56:a5:77:29:46:6f:72:09:
fe:fe:11:7d:90:68:ec:ed:89:43:ce:70:52:82:e6:f9:58:ca:
c8:2f:cf:e7:37:83:9d:d2:2b:77:f1:2d:2c:9d:d1:1c:9f:4f:
69:b2:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:07 2025 by rpki-client