Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: i8LdhyKW7VBbaRAiQCJhOR/PxS0PD5bFamcQMDTiUJI=
Subject key identifier: 7D:C6:48:90:6D:D1:8C:77:9E:A9:BB:99:A6:28:16:FC:B0:B6:AB:CE
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0199FC5857FDF4F44E98B1EAA49246FC7372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: p65aVl2xLMJSEjGsiCaeWzKMSxue4PLbSH94Q6Y3KzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:57:fd:f4:f4:4e:98:b1:ea:a4:92:46:fc:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=7dc648906dd18c779ea9bb99a62816fcb0b6abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:42:86:ba:2b:fb:e4:09:48:4a:c6:b5:31:
86:7f:49:d6:8f:b5:78:65:08:34:36:3c:20:f9:af:
12:2b:a5:36:fa:a2:cb:68:9e:cc:fb:df:8f:e3:2a:
71:be:bf:60:05:f4:4a:e8:d4:50:f7:cc:bd:63:b6:
6c:36:45:7a:51:4c:ea:5b:1b:cc:5e:5c:5d:1d:3b:
39:a8:2f:3c:72:b5:89:05:d5:89:23:f5:4c:68:b4:
15:0c:37:0d:94:12:55:c5:86:1a:9b:6f:ba:da:88:
61:46:f6:85:78:9f:5b:b4:6f:33:16:c7:cb:dc:3b:
68:07:2d:0c:6e:09:4a:18:94:5b:91:33:f0:7d:70:
63:58:4e:e9:af:0f:b1:74:b6:0b:13:66:fa:f3:26:
52:28:ef:29:8a:4c:a2:65:8b:d8:38:2f:2f:8b:f6:
87:cf:dd:96:ba:d4:29:f0:07:e6:1f:bb:69:58:d5:
c2:b5:74:31:89:ab:46:23:56:35:ef:5c:a9:d4:7b:
5f:71:1b:22:72:25:94:74:47:b0:4f:2e:2e:0f:f6:
3e:63:00:b9:f5:ed:0c:c2:bc:cf:44:2f:71:3e:23:
9f:5a:86:14:df:93:72:6c:88:0d:5c:df:7a:63:4e:
99:81:3d:29:99:1d:47:6d:32:f7:ef:9f:c0:ae:af:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:48:90:6D:D1:8C:77:9E:A9:BB:99:A6:28:16:FC:B0:B6:AB:CE
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:fd:c6:af:04:89:3e:79:c6:71:89:8e:1f:bb:03:af:a5:
37:18:00:01:b1:af:2f:ad:96:4e:0f:24:0e:66:e3:b7:fd:53:
20:f7:01:60:37:f3:ac:6d:2d:4e:53:4e:0b:f0:e5:b3:ed:2c:
59:4c:72:33:2e:1f:dd:67:0a:e4:8c:19:2e:6b:ff:bd:5f:47:
7e:45:da:e2:41:27:f8:06:e2:d9:88:8f:83:da:4c:41:10:88:
ef:27:77:a0:b1:0c:a3:d8:27:a2:0e:65:24:f9:dc:7b:44:ac:
17:b9:60:cb:0c:3c:de:a8:d8:2d:11:52:b2:1d:eb:b4:a0:d4:
8b:3b:68:83:19:ab:ed:0a:5d:f8:ab:04:09:52:8a:7b:7a:97:
9e:d8:13:62:a6:68:f8:2d:fc:a5:2f:18:37:44:eb:4a:c8:94:
33:ff:85:4b:02:27:c0:80:f6:62:06:15:88:a8:2a:30:d0:83:
f1:8f:70:c7:02:fd:0c:a5:48:8b:57:d1:ee:27:aa:a2:1b:00:
34:5a:be:d9:a9:37:d4:c3:e0:e6:cc:7c:42:d4:cd:60:ad:19:
f5:ae:93:8c:03:bd:5e:5e:c9:36:b2:ed:f7:ba:13:c8:ab:83:
fb:67:98:10:d1:f3:69:d5:cc:96:39:3f:31:73:ad:9c:ae:e9:
f9:2b:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:54 2025 by rpki-client