Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: kjWD1lN3WdNrjNek3tqyReNKc1Cl2zt14YYHmlaCGjA=
Subject key identifier: 28:D1:6E:5D:87:FE:9F:F5:2E:88:85:9B:0D:91:C6:45:74:26:15:53
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0199FE46E9E68A63B08F87C40A3A62BF1FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 104A
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: e4Mkvlo5HjSOFfhgMmswVNCqvEWrYE49Vcqu2slz8PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e9:e6:8a:63:b0:8f:87:c4:0a:3a:62:bf:1f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=28d16e5d87fe9ff52e88859b0d91c64574261553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:1f:61:d4:82:e7:24:6f:3a:df:f5:cf:96:
82:54:82:eb:44:73:b8:35:f1:90:26:2e:30:e2:66:
1a:29:04:17:a9:b4:94:ee:7b:23:97:fd:04:d9:bb:
9c:b6:12:78:53:4f:6c:f6:4e:2a:46:89:3e:06:42:
2f:4c:ba:0d:75:a8:5b:33:92:1d:29:9b:fa:25:34:
61:1f:7f:3c:39:73:d3:57:58:57:2e:85:2d:a1:4d:
53:d2:6d:8d:30:f4:f2:81:1c:df:6a:80:d6:ee:bf:
6d:40:83:93:60:66:c7:b9:09:63:23:8a:d9:7a:54:
57:cb:e7:40:8c:88:3f:9d:13:79:53:f0:17:8f:b3:
70:a3:14:48:f3:24:87:ea:d7:fe:23:fa:0e:8e:c5:
77:23:dc:fd:15:fd:8c:28:2e:58:cc:ec:fe:ef:0f:
f8:3f:8f:39:ec:96:df:20:d7:8b:82:49:e9:d2:63:
ab:3a:6b:d3:fa:03:a0:10:82:dd:50:a3:c7:a3:0d:
68:f6:11:0d:2b:7d:dd:f1:82:a5:77:62:e6:95:92:
a3:d0:ae:da:a6:9c:28:c7:b6:82:54:61:cb:df:f0:
a4:06:d3:9d:99:29:68:5c:77:31:5d:6b:99:9d:72:
26:f5:76:05:d1:f4:09:e2:34:89:57:56:ac:56:80:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:6E:5D:87:FE:9F:F5:2E:88:85:9B:0D:91:C6:45:74:26:15:53
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:9a:39:ad:8a:57:57:43:4c:99:3c:cc:53:7c:d5:81:4d:
7f:ee:fe:6d:4b:a3:aa:51:81:85:7a:53:46:eb:11:eb:a6:d9:
bf:3e:6e:3c:03:69:3d:91:da:27:40:23:37:5a:34:d1:d5:c3:
30:ff:35:e4:cf:02:b4:19:58:66:45:e3:b6:11:99:76:16:28:
cb:5a:0b:88:6d:73:2d:96:df:01:3a:4d:d3:fa:c8:a4:a6:29:
5d:8e:b7:5c:fa:2e:15:d7:78:7d:f0:1a:d3:ef:77:7f:bc:15:
5f:12:f2:70:2c:68:3a:da:bd:e6:bd:37:d0:22:59:c5:0b:a6:
b6:87:36:fc:6c:79:65:c9:ba:94:15:12:e8:2b:4e:4b:2a:cf:
1f:ec:72:9b:59:1a:03:19:d6:2c:0e:49:be:71:6c:e3:9d:57:
e7:74:d4:ec:e1:e3:4a:6a:2c:30:b1:f3:12:53:69:8b:39:16:
57:4f:05:d1:51:ea:a8:7d:ea:bd:f0:f7:9b:bc:c7:d9:22:65:
e6:f1:6f:b0:1d:0a:f8:70:41:01:2e:1f:20:e0:a8:44:e8:fd:
2f:4b:2a:c3:73:a4:3b:5b:65:0a:ba:b5:5b:e4:91:58:cc:18:
15:29:a0:72:fd:b5:4d:80:43:e0:81:c3:1d:bd:1e:52:bc:44:
07:56:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:10 2025 by rpki-client