Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier: IE2Jfle+7bPfaZaB1Qc8giADhcOEiE6AObmGO44xCkg=
Subject key identifier: 0A:35:1F:4D:65:C3:41:98:BB:21:5B:F1:C3:0A:CB:0D:D7:78:CC:55
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial: 0199FB45E50BE83708021234A77A3143F330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:25 +0000
Manifest this update: Sun 19 Oct 2025 07:01:25 +0000
Manifest next update: Mon 20 Oct 2025 07:01:25 +0000
Files and hashes: 1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: EkBEpk3BDKqFnVbOw9FP7IgBLOZrcP6yzaUp19JUr0Q=)
2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e5:0b:e8:37:08:02:12:34:a7:7a:31:43:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Validity
Not Before: Oct 19 07:01:25 2025 GMT
Not After : Oct 20 07:01:25 2025 GMT
Subject: CN=0a351f4d65c34198bb215bf1c30acb0dd778cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:d2:35:03:c1:34:14:fd:6b:aa:5f:05:5e:
45:dc:87:3f:7a:84:ab:7d:e2:0d:ef:96:e7:70:00:
13:d9:26:62:ca:1f:c0:16:20:39:98:f9:55:16:8f:
7e:66:29:1f:8f:d9:2f:c9:37:03:e9:b4:25:2c:6d:
a7:26:cc:ea:44:0c:37:0b:f7:83:d1:fb:e4:87:0c:
c6:3c:57:37:0b:f2:d9:eb:6f:74:cd:db:ba:7b:5e:
36:8a:f5:57:8d:bc:17:dd:19:69:7c:75:32:d9:62:
18:a4:9c:ba:5b:be:94:ec:e6:0d:bf:f0:3d:d9:57:
17:1c:68:d2:ce:81:29:6c:4c:02:92:e2:5a:36:42:
e2:8a:58:6f:b8:0c:ce:a4:d6:eb:8e:94:35:0b:1f:
8f:cd:17:d1:16:0a:90:18:66:dc:19:d6:39:3a:4a:
c7:13:e2:11:d6:96:7d:2c:b9:c4:32:21:2d:4a:89:
17:26:65:af:6c:44:93:41:d3:9e:38:b1:1b:d9:95:
74:a5:7a:1e:4a:41:f1:32:9c:9d:7f:4e:e6:6b:96:
6d:6d:6a:3b:d4:6b:be:2b:85:39:03:e1:4c:6a:95:
bc:21:11:8c:45:e4:1a:e8:e0:8a:53:69:5b:44:91:
05:f7:07:8f:2a:84:a8:7b:8d:1c:01:94:35:86:be:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:1F:4D:65:C3:41:98:BB:21:5B:F1:C3:0A:CB:0D:D7:78:CC:55
X509v3 Authority Key Identifier:
keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:bc:53:70:db:2d:7b:2e:e7:3b:a0:c8:40:0c:14:5b:31:
5f:18:2a:87:4d:6d:aa:be:41:77:08:01:23:ed:38:8a:4f:8a:
b1:e2:54:72:79:f0:e5:4c:90:dc:13:75:4c:32:d4:1b:b4:bd:
74:cf:d8:0f:15:60:5a:0f:6c:88:a2:86:8c:47:a1:55:48:f7:
2f:8e:bf:36:f9:df:29:6a:ff:52:75:d4:39:5c:d3:b1:d8:c1:
fa:d8:2a:42:e7:18:21:58:8e:3b:6d:5e:d4:d4:4a:40:5f:cc:
e6:64:0f:17:74:9c:69:1e:72:68:51:e9:21:5c:df:56:fe:f9:
b0:5a:9d:64:7d:fb:d9:a0:da:84:77:c3:94:fa:fa:c9:f4:6d:
56:25:5c:40:71:d8:9e:37:d0:b6:2d:9e:9f:fc:d7:16:f6:b8:
a4:4c:10:e4:bd:db:d0:45:9e:af:2a:f5:78:a0:a0:0e:b4:27:
67:b6:da:e2:43:59:b4:77:23:dd:cf:ca:eb:66:87:c1:a4:64:
8b:0f:fe:3d:0a:ec:c3:6b:6c:a2:59:d0:79:65:fb:21:92:26:
8b:6c:56:d9:9d:e1:94:e1:d8:3d:4d:1b:4b:f9:c7:47:41:80:
bb:6b:51:e1:62:f4:ae:97:02:2c:b2:a1:3a:11:f5:e4:a7:e0:
9d:fe:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:26 2025 by rpki-client