Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: I/ho+tQxxIAEZHxEXneyIwUBAP+pMHr9dGyk8yBewL8=
Subject key identifier: 0F:48:81:FF:CE:FC:88:0C:7B:06:FD:35:DB:79:F9:72:9C:AC:AB:EA
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 0199FBEA8F1982F795EB18EED6E232CC2C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: wg31nrDuHQSPhfFTP3sV2IyQ1gHvBTVYkunTG0KpIoU=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8f:19:82:f7:95:eb:18:ee:d6:e2:32:cc:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=0f4881ffcefc880c7b06fd35db79f9729cacabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:2a:39:5a:62:79:ee:fc:0c:0c:21:7b:bb:
96:da:ac:d3:48:a9:ee:2d:00:2a:a8:00:88:99:52:
06:77:4b:8a:12:eb:bc:9b:ec:8c:44:e7:c6:e2:e3:
ca:85:fe:98:52:c3:d5:9b:4f:b7:11:7e:58:9a:f7:
fc:41:bd:ff:95:7b:97:8c:f4:8c:50:ac:b6:14:fe:
cf:ce:fd:19:30:f3:5c:02:22:27:dd:6b:b3:12:6c:
fd:32:e3:c7:0e:ab:b7:9b:f6:04:60:2a:21:bb:ba:
77:5a:e6:00:30:c2:ea:1b:04:eb:61:d9:0a:bc:fe:
68:ba:ef:a7:55:9a:4a:9e:1a:1e:48:1c:7f:48:d9:
61:37:3b:ed:c1:76:4c:24:c9:fd:25:d8:04:52:9c:
29:e8:99:9c:6d:c8:e5:f6:c3:42:62:94:4c:ea:f8:
55:3a:97:6d:c5:14:2b:01:54:a7:4a:b5:2a:f6:5f:
64:72:50:b1:14:c0:f3:b1:0d:a7:de:7b:4b:11:69:
5b:b2:3a:83:0c:98:04:d2:53:73:17:0f:ee:89:a4:
46:63:92:b2:26:b9:a7:90:f3:07:cc:ae:a0:5b:fe:
fe:64:62:f3:a3:79:27:2d:3b:e7:c3:42:68:11:72:
0d:11:d1:72:b8:09:62:42:3f:f4:da:61:c9:14:86:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:81:FF:CE:FC:88:0C:7B:06:FD:35:DB:79:F9:72:9C:AC:AB:EA
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:09:6a:3f:67:2e:0f:36:94:3f:2e:9b:2b:29:a4:6a:18:be:
f1:d1:0a:38:1b:9a:f2:b8:38:12:8e:0c:68:f2:3a:99:a1:db:
e3:42:06:e0:a6:27:4e:c0:7f:6a:1e:18:bb:aa:ee:6a:c3:89:
1b:f7:5b:b1:33:9c:3a:95:10:e7:64:7c:b8:39:30:df:e6:2d:
25:24:ca:8a:1f:f4:07:8a:cd:e9:d5:39:83:35:5d:2d:5e:51:
16:00:8f:43:66:3c:9f:5d:a7:5a:cc:28:10:87:fd:c0:ed:01:
0b:c3:8c:9c:05:3b:9c:ca:21:ec:c7:c0:be:17:e1:5c:43:70:
e3:54:1a:bc:36:f9:a2:52:e2:ba:60:46:1c:de:1d:cb:0c:eb:
4a:e0:8d:9f:c7:0b:63:97:ba:34:c2:3c:69:f8:17:13:c4:84:
62:d8:ec:e1:c3:08:d6:b5:41:16:f1:8e:f7:2c:f9:c4:fd:d0:
30:ad:c2:c6:54:6a:61:ce:11:9d:0e:e0:cb:be:b0:e2:4c:34:
a1:6d:fc:82:4b:a9:60:5b:c2:c2:8c:86:98:83:1c:f3:81:60:
89:90:28:f4:39:9c:71:c0:4a:33:04:d5:9a:c0:ec:db:24:12:
bd:08:cd:81:b2:af:36:c8:16:3e:f5:e6:f1:af:da:13:42:79:
ec:bb:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:08 2025 by rpki-client