Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: e89p9C0Z/Rv98Kutn9NkWWRIp6lL5yu9LJQNuzCEEBE=
Subject key identifier: 10:C0:10:97:9F:26:F1:71:53:C6:DB:66:53:29:50:8D:46:C6:E7:F8
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 0199FEB4C94EEC0FCA6A2F457DD9B43E3EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 15C3
Signing time: Sun 19 Oct 2025 23:01:24 +0000
Manifest this update: Sun 19 Oct 2025 23:01:24 +0000
Manifest next update: Mon 20 Oct 2025 23:01:24 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: OkHw5uYZ+7ETj5E5aR2l2KdsnCXSlGi7Ngm2VvFhptQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c9:4e:ec:0f:ca:6a:2f:45:7d:d9:b4:3e:3e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Oct 19 23:01:24 2025 GMT
Not After : Oct 20 23:01:24 2025 GMT
Subject: CN=10c010979f26f17153c6db665329508d46c6e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:62:83:a4:b6:e5:96:9d:50:d0:5a:b2:79:
b5:7c:cb:0c:b6:bf:13:0c:95:69:51:93:71:1d:29:
37:14:e9:f2:c3:87:31:72:3d:0e:7d:b1:77:a0:a3:
11:f0:98:df:31:91:04:60:10:44:73:af:fa:2a:77:
42:45:16:9b:cd:94:84:05:f0:db:30:1a:46:83:54:
4b:f0:49:99:4f:11:2c:8c:c8:49:7f:8f:12:55:d6:
46:e9:14:44:e6:4a:80:56:b7:33:d7:33:43:51:f9:
b2:bd:60:d1:0f:66:d8:e2:32:62:f3:05:7f:19:53:
d8:f3:58:92:62:e4:d8:f6:11:ae:ab:1f:27:47:16:
1b:06:8b:38:f1:05:cb:8a:2b:2b:08:9b:38:90:d2:
8d:83:f5:fc:f9:80:77:ab:26:35:ba:2d:3c:c3:ce:
ec:60:b9:98:d5:be:ff:73:21:ad:05:39:da:ce:a6:
08:39:21:08:ac:4d:cd:dc:92:db:4f:8b:40:10:21:
ba:6a:6b:02:df:c8:67:a9:40:33:91:08:a6:8c:e4:
28:39:c4:96:62:d1:32:d0:ed:c4:28:38:49:26:a6:
50:e9:e0:05:8c:3f:41:a0:0a:39:3b:d8:e2:84:ec:
a3:bb:1e:4d:3b:fc:3a:48:43:15:3e:e9:33:8c:3e:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C0:10:97:9F:26:F1:71:53:C6:DB:66:53:29:50:8D:46:C6:E7:F8
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:46:a0:04:bd:06:6f:f6:f2:79:0a:d9:0a:e4:8f:3e:de:df:
e4:b7:c7:86:32:7a:51:c6:37:3b:1f:86:dc:26:09:48:6b:3a:
77:43:ed:12:91:00:2d:db:98:09:8d:b4:c6:0a:28:44:92:8b:
2b:5a:09:d6:37:ec:f1:a3:0e:9c:3e:2d:63:d6:3f:5b:f8:b2:
93:5e:aa:1f:fe:81:0a:60:46:d8:84:e0:c8:ba:3f:92:e9:2d:
db:fc:2b:b9:e9:49:9a:0f:76:86:89:91:02:f0:0d:67:97:fe:
ff:26:22:3c:08:42:e1:99:06:1c:dc:1f:99:16:5d:f8:68:62:
b1:3d:17:d2:61:dd:57:3f:d0:fb:30:39:28:c6:bc:19:24:16:
83:a9:5b:e9:89:f5:d7:ad:24:c6:dc:06:cd:17:4b:44:e7:a0:
fc:9a:4d:8f:ad:f4:61:70:31:e6:19:57:c7:2f:da:0a:30:2c:
5b:5c:6a:8e:e1:a3:0f:fe:a1:f9:83:f7:5c:bc:05:ce:b7:b1:
05:e7:1a:d7:ff:1c:ba:53:65:b0:62:b2:40:7d:f3:dc:c9:5a:
39:cb:a3:11:87:db:3b:c4:a5:07:af:ae:39:fe:ff:15:95:b1:
94:df:6c:b5:67:f3:d7:27:dd:a7:fb:31:7d:2a:1a:eb:27:de:
e5:8e:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:26 2025 by rpki-client