Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: RPNkCD9R04fGR3UP8IaWZI96GPCRkPD77+0oOksSBO0=
Subject key identifier: C6:39:8D:66:6E:A7:44:43:86:2D:D9:62:E5:BF:CF:98:0C:10:FF:6D
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 0199FFC82A531FE0C11FCE1718C67A4BBB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 04:02:12 +0000
Manifest this update: Mon 20 Oct 2025 04:02:12 +0000
Manifest next update: Tue 21 Oct 2025 04:02:12 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: s9IOUgFJLbBB9vs2c4l+TD3Em81aUSxy1S5vYINKOs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:2a:53:1f:e0:c1:1f:ce:17:18:c6:7a:4b:bb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Oct 20 04:02:12 2025 GMT
Not After : Oct 21 04:02:12 2025 GMT
Subject: CN=c6398d666ea74443862dd962e5bfcf980c10ff6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:fe:da:5f:07:ae:2e:9e:39:b5:2d:5d:48:
34:91:07:68:a9:f4:bd:de:5c:ec:53:5a:89:28:e8:
27:2e:60:dc:93:ed:c3:f4:1a:c0:9f:67:40:c7:ba:
40:d6:8d:ae:d4:6d:d5:75:3a:70:dc:ed:70:60:77:
f3:04:08:a6:56:cd:de:dd:ce:5d:65:de:b1:e8:43:
e3:ff:8c:17:16:6b:7c:85:90:06:e1:bf:13:14:c2:
c3:8f:45:98:00:fb:98:5a:3b:bd:0d:90:db:f3:c8:
bb:33:55:43:94:0c:1d:fc:7a:8b:a5:5f:ed:4c:25:
78:01:cf:6e:72:7d:9d:c8:b8:8e:ac:32:3d:1b:f0:
12:d3:82:1e:66:a8:83:b3:15:22:5d:68:a0:96:0a:
b4:f2:cf:d5:ed:ef:f4:29:d7:15:25:2b:1a:e8:9b:
4e:ca:36:5e:4b:71:47:69:dd:f5:62:9d:3c:4d:a9:
ce:d8:c4:b1:0c:4d:ec:41:fb:23:e0:16:a9:42:dd:
48:c7:9d:6c:8e:21:05:e3:3c:51:0d:d1:fb:90:d8:
69:66:2c:f4:f1:70:bc:8c:a3:9e:ef:49:28:08:3e:
68:4c:ea:dc:a3:4c:ee:d1:b5:a0:b7:e3:23:55:3b:
86:b8:f3:38:bf:e3:84:6e:a6:09:6c:70:dc:36:53:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:8D:66:6E:A7:44:43:86:2D:D9:62:E5:BF:CF:98:0C:10:FF:6D
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:bb:df:56:45:07:01:01:25:94:b0:28:78:f0:99:8e:b2:
bb:b6:11:45:a8:bf:06:f9:91:88:52:20:05:33:fa:bf:1f:ab:
8a:40:b4:0a:4c:7a:c9:21:56:d4:c0:6f:07:be:8e:51:1f:3c:
19:e4:98:3d:1c:14:d6:bf:a9:73:61:23:de:32:2d:39:58:c8:
d5:89:eb:c4:6f:63:bb:f5:21:a3:44:e1:d6:e1:e8:c4:87:4b:
18:2f:f9:7e:02:be:b5:ea:cf:1f:82:da:4b:bc:a7:87:1f:d4:
55:09:77:02:2a:ac:8b:18:8f:25:6c:ca:a2:0e:7d:7c:bb:ed:
67:a9:f0:94:e9:04:6e:98:d3:10:e5:ea:bc:5d:ac:bd:f8:c5:
88:b1:c9:bb:c7:65:ea:4f:6d:13:12:f2:4b:4a:56:36:65:07:
ed:e2:c5:b3:82:95:e7:2f:23:a0:7f:d9:eb:04:8b:ec:0d:bc:
65:bc:25:7a:f6:06:71:47:35:68:69:12:5b:60:a2:fc:4e:94:
fc:85:5e:b8:ed:a1:31:32:4e:2d:a8:7a:2b:f3:d2:80:5c:a7:
0e:d1:af:fa:76:cd:d7:a6:35:6f:ee:0b:55:8a:87:6e:54:45:
6a:a4:79:a5:3a:48:27:9c:3f:42:d7:cf:59:6a:ef:f6:78:89:
13:55:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:26 2025 by rpki-client