Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: 5x2u86ml4q38i9mxF6tO7piZpKAq9ny+dSf+ciq1jHQ=
Subject key identifier: 70:74:76:59:18:29:FC:D9:4E:84:A4:24:A9:6C:8B:EE:97:30:8D:63
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 0199FA6A1FD60B4F92825C833ABFA2F4E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 03:01:22 +0000
Manifest this update: Sun 19 Oct 2025 03:01:22 +0000
Manifest next update: Mon 20 Oct 2025 03:01:22 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: R9wiqYhptFgzMx+Okuq1UiJyhAW6J8/MVW7RRWgdw0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:1f:d6:0b:4f:92:82:5c:83:3a:bf:a2:f4:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Oct 19 03:01:22 2025 GMT
Not After : Oct 20 03:01:22 2025 GMT
Subject: CN=707476591829fcd94e84a424a96c8bee97308d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:37:da:f7:e5:c1:bf:b0:4b:63:59:66:a4:
0a:e2:30:df:0f:05:2a:ad:64:20:98:73:b4:b9:35:
03:c5:ad:c3:b4:84:64:eb:2b:00:26:20:cf:49:4c:
91:c7:4b:44:c3:50:5c:1b:95:1e:e0:7b:e9:3e:c2:
dc:d8:6c:8f:95:ff:fd:f5:5f:33:14:b9:4d:63:a2:
82:ca:aa:a0:07:f2:3c:8a:7f:b5:75:0e:4e:df:46:
00:20:e7:94:23:36:72:0f:04:14:eb:3c:4f:58:96:
dc:ab:84:0e:53:31:c4:4f:db:47:61:a6:25:c5:17:
dd:e6:af:1e:25:fd:53:86:47:cb:1e:d8:03:ad:55:
50:ed:c8:be:f2:df:4f:89:96:fe:0f:f7:18:8d:76:
73:c6:3c:39:cd:ee:d5:76:f6:2d:bc:8f:df:da:4e:
f0:f4:d2:e5:ea:6f:56:79:a3:dc:0e:ca:fa:43:15:
ac:a9:78:aa:ff:83:8f:d4:fd:16:ff:7e:92:e4:44:
4e:a5:95:d6:74:64:54:b9:1e:98:5d:03:c9:9c:91:
a7:64:e2:89:eb:58:74:14:b3:bf:06:f0:00:78:22:
39:50:9f:d6:06:b8:60:c4:6e:95:af:e9:7e:87:7a:
73:7f:61:fa:1d:c1:35:4d:60:76:af:da:b2:e4:73:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:76:59:18:29:FC:D9:4E:84:A4:24:A9:6C:8B:EE:97:30:8D:63
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b2:3a:33:9b:ff:43:ca:0d:5a:78:4c:bf:7e:52:a1:ef:0c:
67:63:52:30:d7:8b:e6:a4:da:75:60:57:12:bc:8c:81:62:44:
a7:1e:c6:85:0b:c6:9c:fd:2a:eb:a5:0b:83:c8:59:e1:f3:41:
5f:8b:4b:1c:51:04:3c:2b:75:5c:05:09:f6:94:69:31:57:2b:
13:d3:20:54:6e:16:0c:99:9b:51:a6:4f:43:7a:c0:90:2f:24:
da:03:e1:4a:27:cf:b5:b4:07:7b:29:5f:d4:26:54:43:aa:68:
d6:56:e6:75:3a:2a:0a:df:58:70:c7:34:59:f9:41:c1:bd:cd:
8c:e5:35:5f:6a:19:df:7f:fb:fc:2e:18:37:d5:a0:d6:1e:58:
11:71:7b:77:fe:64:12:b9:6e:90:03:50:5b:e2:30:9f:92:f6:
2e:f1:ff:73:c4:8a:2f:1d:fc:61:ae:9a:ae:29:96:45:dc:bc:
ec:d6:05:4d:16:72:b2:bd:db:db:9d:06:89:a1:19:73:6e:33:
b5:f1:59:ef:5b:af:88:44:27:f0:d2:45:fd:58:03:fd:9d:de:
fb:21:41:01:60:42:4e:f1:2e:2b:90:7c:db:4d:6e:e2:26:43:
61:01:fc:d3:3c:01:d8:a9:97:81:01:7f:0d:b8:05:d3:10:8b:
60:9d:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:25 2025 by rpki-client