
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: cfLrwLVz7giETeX3uNrSA836whOwy2hAZ5rsBPvOTNo=
Subject key identifier: BA:8D:5D:9D:0F:3E:6D:2B:C8:10:6E:8F:30:3B:82:C2:89:F0:BB:06
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0199FEEC1800C0E2F8F3BD022E4FCEC44699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 02BC
Signing time: Mon 20 Oct 2025 00:01:49 +0000
Manifest this update: Mon 20 Oct 2025 00:01:49 +0000
Manifest next update: Tue 21 Oct 2025 00:01:49 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: Wc3LhEpGnb7z+1hbUJHaVBTZ0U+6twiAnzhcFKntQeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:18:00:c0:e2:f8:f3:bd:02:2e:4f:ce:c4:46:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Oct 20 00:01:49 2025 GMT
Not After : Oct 21 00:01:49 2025 GMT
Subject: CN=ba8d5d9d0f3e6d2bc8106e8f303b82c289f0bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:98:45:70:bc:48:97:24:59:7d:f4:c5:82:
f5:1d:5f:57:e8:c8:35:94:d2:80:d0:02:6a:3e:6d:
41:d9:bd:f5:2d:f3:2c:07:ef:17:52:9f:95:62:7b:
c6:45:5d:d5:bf:46:44:b0:ba:cc:1e:4f:18:f3:b3:
83:f9:0c:04:f5:31:0b:70:f4:19:0a:e5:a1:a1:22:
7b:98:08:20:5e:5c:c8:04:dd:27:50:93:02:d3:da:
f3:ce:7a:be:7a:9e:b1:a3:56:ac:59:95:cd:5c:dc:
9b:19:09:3d:cc:cb:db:22:3e:17:c5:af:1a:91:77:
7f:73:e3:9a:0d:d4:54:46:de:af:95:4b:ba:6b:dd:
71:b0:4a:5f:a7:95:96:be:3e:8d:4e:fd:ec:98:c3:
88:26:de:e0:6d:9b:8c:68:cd:62:ec:c9:41:29:11:
97:c2:48:d0:43:a0:c8:c3:f1:3a:77:f6:e8:5b:93:
ba:6a:32:70:77:b7:8f:fe:a5:b9:4d:d6:d8:44:88:
11:6e:80:b7:88:c1:f5:63:90:0e:ec:d2:f8:06:e4:
62:06:99:16:91:74:1e:6f:0d:df:d8:f3:fd:76:bf:
e5:f3:5a:ed:95:a4:73:7f:33:b3:8d:d1:b9:39:17:
95:a2:f1:42:10:73:84:fa:37:66:18:6a:70:4b:b5:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8D:5D:9D:0F:3E:6D:2B:C8:10:6E:8F:30:3B:82:C2:89:F0:BB:06
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:0f:d3:ca:53:e0:31:95:3f:a7:9e:90:eb:80:45:46:e8:
ae:5c:41:7d:f5:8e:d9:d2:5b:86:01:9a:5a:aa:0d:43:bd:84:
e0:05:83:73:9b:09:20:75:81:0e:df:79:ed:ec:6b:21:b4:e7:
d7:f2:17:bf:3b:7a:51:f0:d7:09:30:0f:2a:f7:53:ea:44:19:
49:2e:dc:12:11:bd:91:e8:4f:5a:6f:e4:3c:d3:92:ce:e6:3e:
0d:a0:65:40:8e:6d:53:32:17:2b:7f:8c:d7:cd:e6:96:3b:43:
7e:ff:ed:a9:c8:96:77:5e:4c:13:76:a2:24:7e:e6:2d:93:7d:
b9:99:37:bb:b0:05:e7:5c:4e:c5:4c:c5:e3:b4:00:98:47:e1:
0b:c2:09:26:53:9b:d4:95:62:ab:54:34:41:62:a9:32:3e:5a:
0d:1f:11:be:53:56:45:d3:cd:be:06:38:0a:9c:b4:4b:33:d7:
83:f2:ea:de:5c:4d:c8:cc:60:7a:a8:26:0c:1c:7d:88:76:35:
08:1b:8f:8c:1f:b4:10:f4:88:c1:27:f6:92:03:e5:5d:c2:d0:
fc:33:84:c0:de:fb:37:81:6c:d6:6a:b7:81:4e:d5:b0:63:d8:
ca:f2:22:91:53:37:b1:6b:dd:e7:26:12:8a:a5:61:f5:61:ca:
67:49:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:55 2025 by rpki-client