Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: loaxxaIGy/bN6LZZQmfwEC9jrlo/7ZEoT13IqRHwr6o=
Subject key identifier: 5B:A8:EB:89:D6:02:45:F7:43:A8:07:46:D0:A3:63:7D:1B:3E:7A:AF
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0199FB45CDD4CB7B95C3CF0A19B5BF81271A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 04BA
Signing time: Sun 19 Oct 2025 07:01:19 +0000
Manifest this update: Sun 19 Oct 2025 07:01:19 +0000
Manifest next update: Mon 20 Oct 2025 07:01:19 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: FMC25xXp+wVrxtgPFr7XHD6bpXipGSo63VlhS9hKcA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:cd:d4:cb:7b:95:c3:cf:0a:19:b5:bf:81:27:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Oct 19 07:01:19 2025 GMT
Not After : Oct 20 07:01:19 2025 GMT
Subject: CN=5ba8eb89d60245f743a80746d0a3637d1b3e7aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:14:03:4c:3b:45:ac:05:12:dd:e9:c2:0d:
3d:54:01:24:07:68:e8:f7:92:6d:ce:bf:83:69:34:
a3:87:a8:9a:cb:68:54:db:d2:b9:c7:3c:f6:79:3b:
6f:00:b2:72:0e:d9:b8:82:4f:be:04:dd:5f:c0:76:
e1:57:06:b4:ae:04:5d:90:60:d3:48:80:ad:95:9c:
2a:14:2f:4c:b9:ac:cb:8d:75:c1:a6:7e:61:fb:27:
9c:ff:ef:35:f3:4e:f2:0d:80:f5:04:04:68:2f:49:
90:85:23:3c:6e:59:f7:37:bd:52:b3:79:65:0e:9e:
23:b2:0d:8e:61:3e:38:d0:b9:bd:54:4a:64:23:1d:
4a:77:2e:e3:47:ca:78:6c:61:c9:9b:d6:8d:83:b3:
67:0c:0b:8c:81:db:73:de:79:8f:8f:e5:30:0f:d2:
81:d2:e6:e0:a4:b3:41:6b:f2:55:c7:0b:8e:50:99:
12:ae:2c:ca:ff:26:fa:f3:f5:ce:6c:ca:78:3f:67:
29:b3:f2:e0:9f:87:ac:8d:67:16:58:64:bb:30:6a:
5b:ed:2e:b2:76:d4:19:ef:eb:6c:7e:75:87:5f:e2:
d3:34:21:57:73:30:5c:2d:c4:7d:4e:66:cb:c3:94:
65:b0:75:4d:71:7d:78:b9:95:d0:f0:88:6a:cf:0a:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:EB:89:D6:02:45:F7:43:A8:07:46:D0:A3:63:7D:1B:3E:7A:AF
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c3:04:0c:0c:74:6b:bc:2b:ff:98:38:ad:2a:eb:9f:57:8f:
ca:45:e6:c8:10:42:b0:05:f4:e7:6f:2e:b5:5c:f5:8a:4f:8e:
a2:e9:3b:46:a9:48:d8:21:b7:bc:a9:74:52:43:fa:b3:cc:48:
a6:6c:49:58:e7:b6:27:9b:06:ac:5a:bf:25:19:85:0f:90:44:
02:b2:88:b7:17:be:ec:2a:b9:3a:ce:3c:35:4c:85:4d:5c:7b:
83:bb:4c:25:dc:1e:f0:c2:54:8a:25:1b:55:08:a7:3e:e3:1f:
df:38:3e:2c:b6:7e:d0:a9:ed:75:1d:cb:84:d7:51:ad:83:0c:
7b:a6:40:52:a8:9a:d7:88:0a:09:fe:dc:48:53:88:c4:8b:78:
f9:d3:fb:4f:39:9c:ab:94:e1:55:15:29:68:20:57:ba:31:ac:
d1:4d:bf:40:f5:8e:f3:16:e2:a9:f3:ba:b5:06:88:1b:1f:de:
66:9a:49:b6:67:0f:1a:74:23:fd:5c:b5:2c:2a:eb:9e:b6:f5:
5a:9a:6e:9f:66:0d:bf:dd:9f:6a:09:71:df:ca:91:8a:58:45:
eb:94:8c:26:ac:e9:b0:5a:d5:27:25:37:e9:89:07:51:9c:a1:
cf:41:dc:de:06:ca:b9:e3:8f:5a:42:6d:a2:6b:3d:e5:96:d2:
23:33:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:20 2025 by rpki-client