Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: X2EODFP0KMYytq6BW82gOPYn+fqrZd8MyJ7ljCKZZtM=
Subject key identifier: 2B:26:C6:33:E1:E1:15:E6:E7:C3:51:36:73:78:2D:C6:05:31:90:46
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 0199FC21BCCCD8D4426351025DD8690CA8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: uLMVtiCT3NtRyL8QV8GIg/aAv100cuEQgsVXC1yhZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:cc:d8:d4:42:63:51:02:5d:d8:69:0c:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=2b26c633e1e115e6e7c3513673782dc605319046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:99:c3:c7:ab:4d:40:97:c7:48:6d:0f:26:
7f:b6:9b:b2:68:1e:bb:b8:cc:b8:aa:cd:eb:2f:62:
31:d2:9c:f1:95:f6:03:b8:ba:01:48:ce:a4:90:97:
a6:66:a0:2d:58:74:c1:0f:a7:a9:7f:5c:a6:92:91:
a4:61:c8:46:d9:bb:93:18:0e:0a:17:bb:2b:62:05:
6d:e7:50:54:5d:69:89:59:3a:e4:19:2f:23:41:b3:
67:4f:9e:ea:3e:5d:4f:5a:b3:cb:ef:b9:8b:c4:22:
5b:a1:79:26:ad:59:b4:7e:58:aa:1c:e9:95:e8:0d:
0f:6a:65:12:e8:62:7f:9f:76:b3:9b:7d:78:26:22:
ea:9a:59:15:ef:15:60:a2:3a:69:c9:c4:dc:bf:d7:
22:95:43:78:18:f0:5b:df:ae:6b:ee:5b:fd:ab:bb:
81:01:02:1e:43:c1:fc:19:69:48:6f:53:c2:dc:6f:
70:c5:e0:cb:00:b3:c9:5a:b6:4e:ad:1b:78:43:50:
6b:0c:f5:b2:13:29:46:6d:1c:80:8e:48:e0:f7:9c:
39:20:5d:66:e1:ab:ac:19:33:eb:e5:37:83:ea:a4:
24:f1:5e:fe:fd:af:11:0b:30:45:b1:ba:fd:73:43:
ff:26:2c:e2:4a:e1:88:92:d3:eb:03:ca:0d:81:8d:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:C6:33:E1:E1:15:E6:E7:C3:51:36:73:78:2D:C6:05:31:90:46
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7c:f8:2c:a9:58:ae:70:1e:5c:7f:ad:f9:ee:2e:6f:66:c4:
71:74:3b:4d:11:f5:cf:20:8a:c8:07:98:e3:91:38:aa:ce:f1:
ec:f9:67:6e:0c:cb:18:63:43:d3:6d:22:49:86:2b:a3:f6:8c:
be:24:25:58:be:73:07:75:da:e8:bd:10:6e:e9:7a:37:e7:cd:
93:47:a5:cc:0f:a9:74:d4:a4:bf:b1:46:05:aa:bf:04:aa:3d:
f0:6e:50:c9:ff:55:1c:94:3f:f8:7d:ef:f3:cc:73:77:9c:0e:
3c:31:85:98:19:58:e6:f5:27:e6:5d:34:41:5a:27:97:0b:02:
c1:cb:4a:68:4f:1f:d0:84:d6:16:6b:f1:85:06:d7:d2:f9:ef:
62:de:64:f0:ab:db:8e:4e:d1:f0:11:98:9d:e7:0e:21:2c:01:
e1:4c:cf:6d:93:ed:23:8d:cb:ad:bd:01:04:db:ea:49:98:94:
68:9f:11:ba:ff:7c:f1:2a:77:48:f0:f9:90:59:2e:49:99:75:
7e:70:54:18:5a:f0:8a:5c:27:5c:a2:ad:cd:89:fc:ec:e9:4f:
8c:b7:02:ca:6c:ca:ab:cc:c0:74:ca:96:3b:0e:00:0b:6a:f2:
b9:ac:ca:3e:6b:f4:db:5d:d9:06:d8:4b:99:b7:84:9e:5a:1f:
9f:c3:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:06 2025 by rpki-client