Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: xHoyIazkIvLHZk6KtBd1avA7aDO9CRshPojafoceAsw=
Subject key identifier: C1:13:23:14:92:32:A8:BE:A1:CA:66:86:09:E8:AC:DA:84:05:32:DA
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0199FFC8418BF3B20529E15D93E8BB63137B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: tG5l0VeXqucMji7YYfDfoVB5wkujd7N4SdsLXK1QYVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:41:8b:f3:b2:05:29:e1:5d:93:e8:bb:63:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=c11323149232a8bea1ca668609e8acda840532da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:48:a9:3c:70:0a:24:8c:b3:1c:48:f2:6a:
51:de:26:41:9e:61:fa:ba:f5:d7:5d:84:f4:e3:a4:
e8:50:b0:c1:72:27:70:2a:3a:77:4a:a5:60:90:75:
e2:c9:5b:be:0d:e3:1c:9d:f8:23:2d:44:33:02:01:
2c:02:51:f0:55:5f:c7:42:22:19:9a:65:8b:dc:d6:
63:6a:22:55:ee:9f:fa:06:17:75:1b:3b:9d:69:12:
84:d1:68:f6:6d:c0:ce:30:7d:e7:b7:b5:ca:cb:53:
70:a6:aa:2d:47:47:0c:b2:7a:11:53:c4:07:bf:5f:
76:f9:f4:a8:54:8f:66:a9:93:74:53:5d:13:a0:89:
96:6a:16:e7:24:12:58:2f:de:26:c4:35:fd:65:da:
35:68:f3:5b:5b:40:21:78:97:f5:4c:7d:22:58:43:
e7:43:82:d6:01:b0:d0:d5:4d:21:c6:60:2f:eb:34:
f1:66:73:68:99:6a:50:b0:d6:40:02:82:1e:bb:e1:
d3:4b:b3:8e:de:a7:a3:ba:33:4a:bd:72:ba:24:b0:
b3:0e:2b:83:dd:ed:4e:e2:52:d9:88:c1:bf:6c:f3:
ef:0a:0f:0b:56:36:07:dd:e2:fb:fd:31:36:e9:1d:
7a:8a:e1:fc:00:c0:27:d6:a4:14:79:f6:2c:be:19:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:23:14:92:32:A8:BE:A1:CA:66:86:09:E8:AC:DA:84:05:32:DA
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:1d:0d:00:60:0b:b4:58:e1:48:63:5f:22:8a:b6:8b:c0:
28:ea:d0:61:2f:b3:02:75:51:ed:03:59:24:16:da:72:ad:c3:
80:e3:d9:10:1a:23:73:38:78:ba:09:f0:50:f8:cb:85:17:62:
da:1b:ef:9d:7e:39:aa:e4:9b:3d:81:7d:2c:a8:d9:4d:6f:60:
72:70:e1:31:e1:8b:fa:73:b3:b7:e8:3c:6a:87:68:0c:15:24:
b4:a6:06:e8:6e:58:c3:38:0d:db:02:5b:b8:4d:7e:e5:09:f0:
9b:42:c6:87:9d:06:7b:6e:af:84:49:85:2b:d4:99:4a:68:44:
19:88:3f:5d:14:1f:e5:db:fe:9e:87:2f:ff:9e:f8:7c:d4:93:
00:ce:2a:54:7e:22:8c:14:66:e8:b4:60:77:fd:41:ce:93:76:
0f:2c:40:fc:52:74:64:04:72:d2:12:3c:ff:af:ad:91:3f:46:
8b:85:27:70:23:3a:52:98:6d:5d:99:bd:1c:ba:c9:96:a3:5c:
7e:61:9e:81:e4:94:59:ed:ef:29:a9:9e:8f:a2:bd:44:b9:8a:
85:78:c0:d2:e0:b3:5a:05:f7:d4:de:71:f7:80:59:62:b1:5b:
d4:1c:cd:88:f0:46:e2:1f:ca:f4:9f:4b:ed:36:cc:e5:73:f2:
6f:d4:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:30 2025 by rpki-client