Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: QNXnhhWDEiUMjaqzfkrs9P98BwzTuzyp3zuOszgontU=
Subject key identifier: DE:9D:27:9E:37:CF:32:2E:11:97:BA:D3:1D:7C:1F:D1:E1:B0:53:5D
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 0199FBEBD97207BE754C53A7CE87BB9F8AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0324
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: sOZwbU+pWNdasHkwdaTYGvft7anJNlMv776dZV06QSE=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d9:72:07:be:75:4c:53:a7:ce:87:bb:9f:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=de9d279e37cf322e1197bad31d7c1fd1e1b0535d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:e1:30:f6:63:de:bf:16:92:34:b7:1b:15:
ef:81:57:68:86:cc:fa:dd:c5:ad:fe:2e:a3:bd:d3:
98:d6:d8:52:52:ae:07:88:78:a2:82:30:79:e8:16:
44:87:e9:97:2b:67:4f:17:82:86:2c:a7:7d:83:d9:
c2:ad:48:95:b7:08:5e:1e:67:1a:15:64:33:92:c6:
72:12:c5:c2:3d:1b:d8:24:bb:aa:db:f1:d6:3a:e5:
44:f4:14:df:ee:9f:71:a2:fa:3c:3c:2e:22:39:03:
ce:fa:19:03:ab:7f:62:85:99:a6:d1:0a:c7:89:91:
85:42:57:db:20:58:b3:37:2f:54:57:9b:8d:4f:06:
0f:a9:8e:e7:6e:df:74:4a:2f:bb:2e:87:b6:1d:98:
f0:52:d9:68:45:d7:07:b3:68:ab:15:7c:23:ed:a2:
54:9b:f7:8a:6b:32:28:8c:9c:f4:ef:f9:55:ea:ac:
58:91:b8:94:c8:61:5b:b7:db:9c:26:2d:6c:fe:65:
2d:0e:73:4b:67:a7:92:30:61:f0:92:6e:11:aa:7c:
85:db:37:11:28:43:17:96:2a:a2:10:dd:1d:2d:4b:
f2:8d:24:1c:bd:a4:21:bf:45:c4:97:92:21:a1:1f:
7c:7d:c2:87:aa:cd:48:4b:6f:1a:3f:bb:87:ec:b1:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:27:9E:37:CF:32:2E:11:97:BA:D3:1D:7C:1F:D1:E1:B0:53:5D
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:ce:51:85:c0:42:fa:3f:ae:6b:95:90:fa:18:5e:fe:7e:
47:20:58:28:25:9f:69:b3:86:b3:c3:75:8d:cd:1c:53:04:8f:
a8:c5:a9:e6:9e:0e:eb:14:94:65:96:a6:f1:f7:cb:b1:99:bf:
06:13:ac:06:d1:3f:79:a2:2f:2f:ec:2d:a4:28:a3:2c:a6:58:
47:c3:46:86:a3:bb:9e:a2:23:c6:0d:46:5f:e7:ec:4f:65:0a:
3f:43:24:db:80:fe:b9:2a:f6:4b:0f:cc:5c:5a:3c:3c:a6:70:
93:97:f5:26:b8:1b:2b:d1:74:44:bf:8d:a0:57:f4:b4:1f:7d:
a3:7c:e4:fa:89:2b:f0:9e:b1:8e:34:0a:6f:14:b1:99:80:bb:
8e:84:91:5f:23:7f:c5:87:56:1f:31:f1:fb:69:d4:30:07:83:
19:aa:bc:8c:5e:6d:30:ac:76:6a:ed:7a:59:83:82:af:cf:ef:
92:b6:82:5b:93:91:e8:7f:47:88:b8:6d:21:09:06:1b:b6:06:
d9:08:d5:8e:d3:0e:2d:ca:0c:38:bb:92:a6:5d:39:79:98:31:
fd:90:6a:05:f9:6e:7d:0d:a7:9a:d3:4a:60:80:42:f3:fc:f9:
90:7a:43:2b:44:1b:5c:bc:bf:b3:15:60:ab:b9:64:74:3f:2b:
b1:3b:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:43 2025 by rpki-client