Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: XT9A+sI2jtHwexlpQEgBdPdf7Sj1vnU1/6p+WmS89bY=
Subject key identifier: 7C:19:93:5D:F4:03:AC:D9:7D:8A:A1:85:D2:72:5A:0C:CE:AB:26:F2
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0199FB7CA6F41CBB8891C095468D6A59691E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: EsqA/YP8XHw6maV3FuVx+g8AVBURFMQCzrNn84zyNtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a6:f4:1c:bb:88:91:c0:95:46:8d:6a:59:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=7c19935df403acd97d8aa185d2725a0cceab26f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:64:fe:0c:37:01:81:3d:f1:92:16:38:30:
7a:56:7b:56:51:43:49:88:fa:e4:4b:ca:97:e3:c7:
1e:9b:fc:18:1e:65:ad:88:1a:9c:bd:d9:d3:81:b9:
ca:33:d5:7d:17:b7:29:58:e5:6d:55:b2:39:b8:ff:
93:d1:71:9e:d6:27:d2:30:70:a0:22:04:ab:8e:26:
e0:d0:6e:86:64:da:f5:76:4f:4c:b9:06:56:72:98:
4c:7f:c2:d1:b2:0d:f3:03:73:70:0c:89:23:0a:09:
6b:1b:e7:17:94:e4:d7:d1:3a:ab:78:f8:02:6c:f4:
65:cc:2a:73:74:8f:cd:d3:b2:43:ad:59:40:13:ae:
ab:0b:33:2d:2f:39:3f:84:ed:3c:5b:ae:5f:a3:cc:
74:a6:94:0f:24:e6:94:5b:d5:4d:4a:ac:a4:a3:ed:
3b:dd:c2:ff:f4:20:79:de:3e:fd:9f:ad:3b:49:c1:
f1:bc:a2:3b:10:ca:7e:b1:da:64:cf:c4:b9:aa:c0:
37:25:45:66:f4:7e:c2:7c:41:ad:0b:5d:e8:5d:08:
19:2e:95:f4:ca:40:74:e9:3f:59:11:ca:05:f3:a1:
1d:17:02:57:08:be:e0:3a:44:f6:fa:a8:d1:9e:0f:
77:f8:3d:9e:24:01:51:75:2c:d1:a8:1d:2f:3a:a8:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:93:5D:F4:03:AC:D9:7D:8A:A1:85:D2:72:5A:0C:CE:AB:26:F2
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:05:5d:e2:fc:ad:2c:89:33:ea:37:cd:92:3e:df:53:e3:
29:54:55:21:44:e6:14:2f:21:2e:97:cf:87:16:04:d8:ea:73:
f2:f8:95:3d:db:f3:16:6a:a6:8f:00:5c:7e:02:39:91:40:01:
0b:ad:de:bb:e4:36:c0:70:25:cd:4e:11:18:4e:bd:aa:46:77:
ae:79:6a:43:34:2c:19:52:5e:ec:35:bc:83:77:71:a1:97:12:
94:61:a0:77:c7:48:37:24:a5:5b:03:d8:9e:ac:fe:2f:81:1a:
17:7a:9d:5a:86:70:d2:78:29:6b:0f:c3:82:1f:5f:3e:0c:51:
4c:b7:81:15:d3:cd:00:9d:48:4e:60:39:52:ef:65:84:9c:1f:
f2:72:93:03:ce:a7:53:19:cd:e7:ad:a5:0d:20:50:0e:04:d8:
1f:84:e0:1c:e2:49:82:c6:95:14:f9:58:63:1e:e0:19:a0:51:
fe:97:c9:1a:28:a3:14:a5:5e:5c:ba:01:c4:07:0b:4e:e6:a3:
2c:2e:25:5f:67:9d:26:c7:72:8b:7d:d9:e8:2f:47:70:f1:03:
f0:d3:68:3d:f0:41:ac:b3:d5:55:61:0f:c9:38:a2:67:00:b8:
ed:47:0f:d8:6b:49:2f:fe:24:90:b4:cb:e7:5d:40:de:0f:2f:
95:60:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:41 2025 by rpki-client