Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: SarVninQVrkxDauvN4z455SQLS+1IW3B5edCBdIry3M=
Subject key identifier: 9B:3E:30:D1:2D:AA:5E:C4:A6:CA:10:16:99:4D:FB:65:AC:07:71:CF
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 0199FC58547EF3DE491704E103821F45983E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: Pyy2z4gA9NbsMy4WzqkbFzc0Im+S3HqCOPDz5GozzdE=)
2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:54:7e:f3:de:49:17:04:e1:03:82:1f:45:98:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=9b3e30d12daa5ec4a6ca1016994dfb65ac0771cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:ac:41:92:ce:1e:cc:11:52:cf:82:f8:90:
4f:a3:d5:90:95:70:ca:68:4c:99:36:b9:56:2e:ba:
2e:63:ad:30:3c:09:d6:26:8b:97:a4:00:05:9b:fd:
dc:90:50:1e:ab:e2:f5:c7:7d:94:4b:95:f1:9b:f1:
4c:fe:92:46:ff:0b:80:75:be:c9:43:60:dd:3c:2a:
5e:f3:81:e4:24:bf:a5:bc:20:40:01:11:26:2a:83:
ba:5d:21:17:22:c3:19:8a:6d:7f:da:be:db:1e:ac:
6b:8b:0d:13:f2:24:18:dc:80:65:ec:40:7a:c5:b3:
80:9e:ee:ae:b3:db:b9:4a:1c:76:f9:ff:aa:4a:41:
29:34:dc:cc:df:b2:63:d9:29:f1:e6:11:97:0c:27:
f2:6d:99:e8:24:dc:f4:ce:29:ee:75:13:fc:d5:61:
8e:87:4c:63:54:92:cc:92:3f:c4:d7:c0:de:d9:2f:
2a:86:ca:03:26:6f:2f:a4:48:85:32:8d:b2:5f:cd:
a3:36:79:61:cb:3b:36:38:d5:7e:fd:79:06:cd:63:
13:c6:48:59:9a:36:74:1f:fd:28:9a:d7:d5:c6:1a:
38:a5:76:75:d3:24:f0:b8:2e:1d:b2:19:82:af:37:
ae:7f:76:6b:06:9b:99:bb:e8:e3:23:ef:cc:6d:d4:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:30:D1:2D:AA:5E:C4:A6:CA:10:16:99:4D:FB:65:AC:07:71:CF
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:52:0d:1f:a8:e8:50:e1:a7:f8:e6:e5:e9:ef:d3:4f:4e:fb:
2e:56:12:f7:ac:02:8c:22:b1:04:31:3c:54:5a:4a:30:4e:20:
67:fa:62:df:2e:97:d6:cd:a5:52:66:9e:19:11:d5:c4:38:2f:
6c:a4:10:59:34:43:98:cc:f8:24:69:0f:31:ed:d2:83:e4:ec:
7e:af:4d:aa:c2:53:fe:9c:37:c5:08:8c:8e:83:cc:29:45:6a:
62:55:7e:95:16:81:d3:af:82:d7:c1:9d:d9:d4:11:54:ee:39:
4d:3e:c8:aa:26:77:d8:2a:09:63:4b:85:f0:15:8e:c2:61:32:
47:8a:2a:07:d0:29:ca:91:ec:7c:9a:14:70:1e:b4:50:29:fd:
89:c2:b7:d6:3b:a9:97:02:ff:33:d2:db:ed:8b:0b:14:16:b9:
3a:02:cf:4b:b5:08:3e:1a:f7:46:fb:48:bb:d2:a8:6c:92:2d:
94:d1:2a:99:68:20:35:5f:b9:79:ae:0a:39:3a:4d:4c:96:0b:
47:41:3d:e9:4b:8f:8c:ae:fc:9d:62:2b:6c:43:a9:6d:6c:a9:
db:0c:3e:51:32:7d:22:5b:5b:69:b5:af:dd:48:bf:ef:ec:87:
e1:23:d0:1a:94:37:60:09:19:58:4e:33:c5:fd:5c:e4:92:ac:
49:a3:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:25 2025 by rpki-client