Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: qHDttm2LqIkVP9UXWJxSyuGFBXDhE048SfF2Nc+4Mpk=
Subject key identifier: 91:C7:05:27:0D:E2:8C:9A:3D:78:E1:73:5C:55:F2:8F:DD:66:39:57
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 0199FDD95D81881CC83CDEA050F24FDDA4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 1359
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: xqfviFuvx3XRpJnnYclsloj4czXS+ja5InKDM4rz5Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5d:81:88:1c:c8:3c:de:a0:50:f2:4f:dd:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=91c705270de28c9a3d78e1735c55f28fdd663957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:69:df:df:8c:db:97:5d:9c:be:fc:e8:84:
4b:9b:7a:90:67:9e:52:06:71:70:cd:18:c8:ba:82:
76:63:dd:0c:17:b7:eb:09:84:95:12:fc:6e:d8:2a:
59:86:68:f5:b6:7b:4f:c5:af:55:59:32:f8:cb:18:
dc:0f:bc:51:25:2e:37:bb:a5:ea:c1:61:d8:ad:98:
42:1b:09:6b:95:9f:4c:13:ac:cf:d6:01:6d:6a:64:
2a:1f:06:3c:4b:93:09:72:9b:01:76:34:11:b1:55:
fd:ec:a5:24:a7:21:45:06:09:e3:d8:a8:dd:f3:f4:
4e:7e:77:f8:a2:a4:30:15:dd:48:65:ac:81:35:3b:
38:43:f5:6e:52:2f:e5:06:e0:f3:5e:67:28:80:98:
74:79:82:98:2e:1b:6a:10:68:e0:1c:0e:ba:4e:1b:
2e:5a:a2:5c:23:89:d6:64:05:ae:f1:5e:6e:a8:b2:
96:19:8e:fd:b2:96:92:8d:a9:79:b2:cf:bf:ab:5c:
7d:28:e2:80:ed:4c:89:05:c3:10:aa:a1:d2:9f:66:
26:f6:bd:d2:e3:d9:12:3d:34:b1:51:1a:22:48:bc:
a3:1b:40:a4:b7:ac:22:04:6d:1a:c3:12:e6:8a:54:
00:1e:04:0e:22:e5:92:7d:d1:0b:a5:84:4c:2f:35:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:05:27:0D:E2:8C:9A:3D:78:E1:73:5C:55:F2:8F:DD:66:39:57
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:98:db:25:4b:f4:2f:6d:07:da:0c:dd:9b:14:b7:91:c6:
2b:c4:49:dc:f5:cb:a6:bb:1e:2e:db:6e:c3:93:fc:bd:4e:68:
cf:42:3b:8c:c1:aa:66:56:7f:be:3b:59:59:6f:e3:8c:c1:08:
10:cf:e5:5f:ec:63:92:44:c9:d1:75:db:8f:5b:0d:8a:a1:c5:
82:b5:5f:01:3e:37:1e:15:fc:6d:57:3f:e3:f8:0e:71:78:20:
10:ee:85:ed:10:0b:ad:af:3d:67:1a:83:17:a6:be:6f:29:4c:
14:d4:73:d8:ed:57:c5:ed:4e:0a:dc:16:e2:29:6e:58:6a:0a:
4f:da:66:e0:a6:2d:cf:42:bf:1d:f6:50:b0:73:70:8a:b0:e4:
7e:e2:f8:ce:ca:bd:90:0f:13:98:09:26:bd:dd:66:69:0b:40:
cd:04:8c:4a:80:7f:d4:2a:8e:44:1a:d4:27:da:c1:09:85:f2:
a6:3f:37:28:5c:7a:fc:e2:79:df:19:e3:74:55:70:ab:a5:76:
7b:5d:3b:07:55:32:03:2b:ff:55:34:ed:0b:cf:ae:50:41:0e:
74:c0:2e:38:3a:1d:3f:b1:f1:bc:d0:c5:30:a2:67:da:2d:7d:
49:9d:97:00:2e:1f:00:28:01:67:f5:7b:94:e2:7f:a6:82:dd:
53:cc:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:37 2025 by rpki-client