Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: 2AXzYOunqwm/mOK33wl/NfoVTkTWvd2sdIuHtuVOn30=
Subject key identifier: 47:7F:D2:06:1D:8B:82:78:13:8D:D8:E5:CE:27:E7:F7:ED:49:53:0C
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 0199FBEBD2D945B79A349401476298532330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 137C
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: 4C3Lwa4fRq70+PzoQfZ7EWY8NhO7b2SdDmJpHRDxpyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:d9:45:b7:9a:34:94:01:47:62:98:53:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=477fd2061d8b8278138dd8e5ce27e7f7ed49530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:f2:7f:1e:9d:02:0f:9f:41:e6:14:7d:9c:
51:d5:3a:1e:ae:15:7d:47:de:d8:b7:dd:05:17:7a:
ad:0a:0e:54:11:09:5e:5d:a1:eb:ff:27:04:78:c9:
47:9a:8d:9d:e4:8b:7a:15:a5:f7:c5:fe:82:19:41:
b3:dd:b1:66:8f:07:c2:84:41:88:3f:90:25:36:72:
cb:2c:8e:68:30:ce:76:fe:37:a2:87:3e:3c:b5:68:
d7:d3:2e:a3:b6:c5:2b:49:c0:73:f2:d4:18:65:28:
51:ab:b2:f3:1d:13:43:15:db:85:cc:b1:15:bb:1b:
c6:84:1a:f5:33:06:77:98:42:2d:bd:74:29:0d:1f:
06:7c:60:7d:49:fb:30:6a:d8:10:f0:b6:30:ec:e9:
96:ce:2f:97:21:eb:31:05:1c:da:b1:2c:9c:70:a1:
93:aa:7c:69:a8:67:97:a4:43:24:28:71:5e:67:14:
2d:b9:2e:e5:69:52:f7:28:51:28:b6:a0:a1:93:4e:
f0:5e:1e:ff:5f:d5:f0:36:bb:b4:b8:cf:7d:09:8d:
25:37:70:03:c2:3f:64:26:8d:7c:de:0c:5f:d6:e2:
e7:6b:25:2c:1b:bb:f5:4f:d7:b1:04:26:7c:be:bd:
69:be:7a:f4:ca:40:51:71:1c:95:d6:3c:fd:7f:93:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:D2:06:1D:8B:82:78:13:8D:D8:E5:CE:27:E7:F7:ED:49:53:0C
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:43:95:15:32:9b:16:04:4c:80:22:74:56:6e:f2:d4:4d:30:
83:4f:d9:5a:01:34:84:04:dc:59:69:58:b2:51:be:06:91:e0:
ca:16:aa:a8:8d:e1:d3:03:d2:40:66:2f:d5:88:f8:33:c0:45:
34:1d:c5:8b:18:02:f2:7e:c1:a3:bc:3b:3c:32:62:88:78:3e:
f9:63:5e:ea:01:64:af:2c:a6:6c:da:71:82:7f:b2:23:9a:e5:
e3:bd:de:db:96:ee:85:76:34:8d:81:1e:b9:0d:54:87:6d:f2:
52:27:6e:cb:b8:dd:19:9b:b0:6a:d8:c8:3a:63:26:4b:7d:30:
96:7a:dc:d7:93:77:75:86:38:5c:b1:d1:f0:a1:34:3e:8b:ab:
81:55:8b:7b:e9:43:af:0e:31:f1:15:67:5a:9b:c2:bf:93:e2:
67:94:bb:8a:59:d0:6a:6b:74:1b:22:d9:12:41:08:39:fb:57:
1d:71:d1:f9:7b:c5:46:56:78:96:ee:5c:0d:2a:02:c3:14:d7:
be:44:e1:cf:7d:83:79:33:34:2c:28:a8:08:0c:97:c8:ac:43:
10:2a:69:30:23:9b:4b:38:17:29:1f:3f:72:d3:bb:fc:5c:70:
c3:f6:43:55:a9:4d:a3:a5:dd:83:90:d4:a2:b6:5d:a1:4a:41:
54:e1:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:03 2025 by rpki-client