Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: DRSOKAFUWQtix4hVpSg3TascAWhBRQRdyf8cSW+MBvg=
Subject key identifier: DF:72:EE:BA:CE:63:8D:AA:9E:56:91:B9:16:06:68:ED:E1:B4:B3:15
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0199FE470914C5B64BD7E66D60FBCD804D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 1484
Signing time: Sun 19 Oct 2025 21:01:32 +0000
Manifest this update: Sun 19 Oct 2025 21:01:32 +0000
Manifest next update: Mon 20 Oct 2025 21:01:32 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: r1kEc4071oVkCgGSddA9cBMN3RfDpobT3mmWpJ6PdmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:09:14:c5:b6:4b:d7:e6:6d:60:fb:cd:80:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Oct 19 21:01:32 2025 GMT
Not After : Oct 20 21:01:32 2025 GMT
Subject: CN=df72eebace638daa9e5691b9160668ede1b4b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:c1:d2:8c:2f:d4:f3:c8:1d:a2:a6:6e:62:
3f:e5:cc:6c:48:bf:6a:3c:2d:d0:eb:76:ca:6e:4a:
08:70:05:81:f2:39:bc:1e:fa:49:b3:2c:25:81:a2:
77:a7:2d:b3:30:2e:7a:95:b2:7c:ee:23:aa:5b:32:
ff:31:f4:4e:93:8c:29:a0:8a:e2:0d:5b:50:3b:1a:
45:49:88:66:e8:80:c1:e5:49:39:e3:92:3d:09:8d:
ae:1f:ad:32:30:05:eb:3b:a4:c3:a9:1e:34:a7:1e:
e9:7b:c1:e2:c5:de:a8:17:1b:6b:a4:43:98:e8:c4:
1b:eb:37:b3:a0:e7:2c:75:23:05:48:79:bb:f0:e2:
35:08:ed:0d:b7:1c:22:7a:10:b6:4a:3e:6f:be:41:
53:1c:8f:c9:41:a6:2b:e0:bb:90:e0:3c:19:95:79:
bf:14:44:56:45:3e:a5:5d:29:a0:91:52:2f:66:af:
06:b3:b1:1d:e1:df:3d:a9:ea:54:eb:9d:01:7c:30:
f4:37:54:c1:98:0e:ec:72:2c:00:65:54:b5:37:29:
18:14:bc:2b:2e:5c:7a:68:3f:5d:18:2c:c6:14:09:
eb:52:db:78:c1:2b:5f:3d:aa:6e:6f:44:cd:98:bc:
ae:e3:b4:b1:8a:86:89:fa:03:74:35:f8:51:c1:23:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:72:EE:BA:CE:63:8D:AA:9E:56:91:B9:16:06:68:ED:E1:B4:B3:15
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9a:02:aa:f4:fb:a9:6f:e1:66:7e:9d:c6:ab:ca:db:76:5f:
ca:ca:07:eb:e3:2c:10:ec:98:65:4c:78:98:74:b8:6b:d6:85:
69:af:b9:c9:5d:c2:45:d6:cd:91:c4:f6:fc:40:9a:d4:9b:2b:
a4:0b:13:9a:4d:78:35:cd:4c:76:da:a3:06:70:a4:6d:69:de:
32:d1:00:12:60:3f:dd:91:4d:f5:0f:41:67:b5:c6:26:79:0b:
a5:59:ba:f3:87:39:96:6f:f8:c6:16:0b:7c:4c:a8:4f:22:76:
a8:16:c4:1b:d7:76:eb:5f:f9:52:d9:a7:6d:f5:2d:19:21:0b:
20:fc:27:4d:db:a9:4a:67:0e:92:35:b4:ed:b4:c0:a5:02:0d:
32:76:6d:21:c9:87:8b:be:eb:84:8e:48:4c:eb:ad:d9:f4:22:
64:4f:8a:d1:2b:1f:8d:9d:a1:c3:ef:9c:c0:5d:12:93:ea:e3:
3f:d6:6d:9f:82:02:7c:63:ef:06:07:4f:ba:62:be:b0:e8:d2:
c5:52:2f:71:e6:37:df:0f:62:18:28:d9:1b:6c:7f:aa:11:2a:
be:fb:0d:5a:79:85:a3:7c:b3:a8:cf:8c:17:fa:98:df:f0:03:
3d:df:b2:e5:4c:79:1e:6d:78:78:d1:18:e0:8b:84:33:ae:d3:
97:7d:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:11 2025 by rpki-client