Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: 8KxzwT7DxjMB3BaY995tUvxlotJpxYgEK53BvFz+gU0=
Subject key identifier: BB:67:16:F1:1E:23:2C:6F:BC:2E:59:92:53:4A:F2:A5:50:50:E7:E9
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0199FCFD791977CD18702D508E2B19CEC3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: IldnESVb5YAXRybajnGx4ZHkjvs.roa (hash: Z7vt2Bz5Xlx6ZNjSBTF37CVzL/JzsawDeZyWyaF9i1k=)
2: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: o4mu1avsYNxK4jXOhj1NRYvAc4BxGpx1drtL3El+XQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:19:77:cd:18:70:2d:50:8e:2b:19:ce:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=bb6716f11e232c6fbc2e5992534af2a55050e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:f3:16:d7:7b:5d:fe:af:c4:19:fb:02:d5:
7c:4b:fd:69:b9:2e:09:09:b7:3a:8e:1f:c0:dc:21:
2a:49:ee:b9:ad:3d:f3:24:e2:c9:93:0c:3b:82:08:
f6:cf:24:6b:74:f6:60:eb:44:be:c0:fb:51:0f:b7:
9b:28:3a:7b:c1:ad:38:06:6c:bd:f1:4f:63:1a:4e:
61:4f:02:e8:a5:7c:5b:eb:c9:41:45:d6:2b:a8:36:
39:0d:1a:6b:36:2e:82:c9:48:3f:7c:38:54:0f:5c:
ad:fa:7e:a7:79:32:02:df:a0:3d:67:83:5e:46:d4:
11:6e:cd:84:e3:8d:79:39:ab:9a:24:68:71:6f:f8:
eb:39:6f:ca:7f:51:d2:c8:5c:a9:03:f0:20:7d:17:
26:20:36:a2:21:b8:81:fb:5d:fa:9d:f2:44:b4:8f:
e6:21:d1:3d:67:a5:7c:2e:ef:d1:29:39:a7:60:41:
b5:54:ea:65:83:21:c3:7b:ed:48:d7:6f:ad:87:e0:
0b:0e:52:c9:8b:10:77:ae:08:6f:06:21:6a:b4:e1:
f7:47:fe:5f:e1:83:0b:9f:4a:6e:80:c3:ec:d6:a1:
66:83:3d:2f:e2:6b:7b:12:7d:f9:f5:14:01:37:42:
90:71:34:79:cd:d7:f5:03:da:db:92:99:d4:72:e3:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:67:16:F1:1E:23:2C:6F:BC:2E:59:92:53:4A:F2:A5:50:50:E7:E9
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:13:06:21:83:65:e2:7d:33:ef:0c:ac:a9:a0:43:77:57:
19:da:2f:ba:2f:d0:6d:0b:c0:db:6f:0a:a2:17:74:e1:ab:c3:
d2:9b:93:97:df:fa:2c:21:eb:9e:5d:d6:5a:cd:01:0e:3e:c0:
e4:36:ee:af:d3:61:b1:97:8f:d5:de:31:45:ba:52:95:9c:72:
23:db:41:98:d4:b5:1d:14:3b:05:ff:d4:eb:6a:cd:8a:26:c3:
7d:b2:7a:43:c0:7b:9f:63:32:fb:12:79:d5:82:cc:3b:8f:87:
21:bf:8e:5f:1c:5c:6e:04:2c:7f:94:93:e8:48:84:74:1d:d3:
93:dd:50:3a:fa:e1:4d:fc:9d:02:2e:41:9a:a7:43:32:c6:83:
af:08:b1:8e:f8:6a:65:11:32:ab:42:f3:c8:e7:2a:b4:a1:c4:
c9:a8:47:39:fe:a3:50:3a:65:34:c3:de:fd:4e:1e:b5:65:1a:
67:37:72:de:73:c6:e9:94:75:9f:f7:e8:e9:76:f8:49:a0:12:
ac:54:9b:d2:ec:03:ac:15:2e:8e:f0:b7:fd:b7:27:bd:a9:87:
ec:70:14:24:c1:55:b7:fe:1b:10:68:9b:5d:f9:6f:13:88:d9:
38:26:2d:c8:e4:cc:4d:dc:be:47:74:73:b9:85:4f:af:b2:8a:
92:44:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:37 2025 by rpki-client