
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: 3hZudou/vtxGauqQrAdY8/oE7+/vCUdwTeMRA9C/kIM=
Subject key identifier: 83:82:06:3C:84:7B:13:35:D2:AB:12:35:CD:63:8B:4E:48:1F:34:E5
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 0199FDD8EFF29174B01E61C8A44C9F0D97A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0A50
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: Df6vJy6Zfuy7icIF02v4CDNfLHqB65jvRIbSUD4nhVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ef:f2:91:74:b0:1e:61:c8:a4:4c:9f:0d:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=8382063c847b1335d2ab1235cd638b4e481f34e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:cc:17:f7:46:bd:fa:d6:91:a9:13:8a:e0:
53:4b:c2:b7:20:56:da:8d:da:9e:8b:39:6a:24:e3:
17:ca:29:c9:02:34:b9:4e:d9:2d:ab:a5:0e:3b:79:
7f:c2:66:44:fe:a3:df:d1:9c:6b:18:15:76:c8:c0:
a1:5e:89:6b:79:16:9d:b6:2d:39:d2:ed:fb:9c:64:
38:0f:1f:3f:b7:b0:3a:52:53:a7:8e:7d:bb:84:09:
4d:43:4d:23:1c:ae:70:3c:ea:01:96:a7:9e:91:1d:
22:92:6e:48:13:d1:30:06:f2:e8:34:7d:e7:26:a8:
77:7f:4c:02:86:81:01:08:2f:c2:b1:d9:b1:6b:9f:
27:74:01:87:90:b7:5c:c3:f6:50:ee:e6:8a:fa:d8:
2e:63:d0:eb:11:ec:90:9b:9f:38:c5:b7:a6:38:0d:
ca:de:a4:ec:0b:17:96:c9:d0:d9:00:4e:45:16:4b:
78:c5:ea:8c:42:91:9b:bf:72:4b:2c:6a:4b:f5:59:
4b:a5:dc:13:e6:6d:c6:80:a4:67:79:ec:2c:17:08:
38:25:b5:e0:c8:57:91:77:ec:db:d7:1d:62:cb:76:
80:3a:ca:c8:c7:76:55:29:18:12:b9:1a:2d:5c:81:
7b:ae:9f:17:42:b6:42:b4:06:be:0d:5e:21:af:6c:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:06:3C:84:7B:13:35:D2:AB:12:35:CD:63:8B:4E:48:1F:34:E5
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:1d:a6:93:2e:cd:fd:76:b0:ad:75:7e:5f:f9:63:1c:98:
00:c7:cb:59:56:14:21:05:b9:6b:60:d6:a5:1f:51:8e:5b:7d:
78:c2:5c:e5:9e:98:79:37:6b:92:df:86:53:c5:d0:b7:8c:d7:
60:e9:7a:b9:ec:1e:14:07:be:c2:fe:d2:77:37:53:89:2f:9f:
47:dd:05:24:59:41:da:97:40:58:16:ed:27:bd:4b:2e:c5:33:
8d:aa:36:8b:a4:6e:d9:b5:d3:7a:80:0c:c5:5b:19:1b:d1:38:
94:1c:1a:7b:c5:68:86:8a:e5:2a:3d:55:e7:39:da:a1:6c:83:
a6:b3:9a:52:77:85:ef:97:55:7c:ec:cc:84:0f:f8:ce:36:2f:
14:ce:01:2d:05:2d:09:dc:15:7d:17:f3:f6:7d:b0:10:22:d5:
05:b6:99:a9:ce:41:e3:68:af:f6:c6:41:69:c0:53:7a:9c:ab:
96:22:5a:73:ea:f3:58:69:fa:35:9f:39:d5:03:1a:13:ec:73:
24:3a:09:ca:ac:42:d0:c2:d4:43:85:b9:8c:30:d6:75:cb:1d:
dd:98:11:06:45:6c:88:00:f4:16:2e:4c:c3:56:d3:1a:6a:f5:
17:fc:9b:52:3d:2f:11:58:13:3c:7a:7c:b7:e4:88:a5:5f:29:
27:39:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:02 2025 by rpki-client