Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: 3l1GrUR4DW20ZDYrSbt0dqe+WnSJywsaAWGJVI5RuXU=
Subject key identifier: E8:65:AB:8F:0A:5B:D8:64:1E:30:B9:B8:E0:21:06:FD:A5:B1:7C:1F
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0199FDD939061EC761BD45D20EF2EFDAA1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:35 +0000
Manifest this update: Sun 19 Oct 2025 19:01:35 +0000
Manifest next update: Mon 20 Oct 2025 19:01:35 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: L6yrQLHkx60FKcxuNmt1qfycXpeHNHVqMbqtgh9vDOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:39:06:1e:c7:61:bd:45:d2:0e:f2:ef:da:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Oct 19 19:01:35 2025 GMT
Not After : Oct 20 19:01:35 2025 GMT
Subject: CN=e865ab8f0a5bd8641e30b9b8e02106fda5b17c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:61:1b:2b:38:d5:76:40:10:a8:5a:0c:c2:
aa:0e:50:8a:4f:f1:54:9e:a8:6a:56:66:a7:81:55:
30:ff:89:2c:28:b1:7e:b1:e5:ec:9c:e6:7d:9c:85:
e2:e7:e2:82:e6:43:25:91:b4:f6:2e:ec:01:4d:4c:
55:f4:f7:24:82:37:6d:69:e3:56:05:c6:f4:a1:e1:
3d:32:50:89:9a:ee:fa:72:ad:98:8d:d1:00:81:7d:
cd:51:be:a9:b5:67:76:b6:59:e6:cb:31:4d:18:88:
d9:ef:59:c5:ad:ea:92:73:d9:64:5c:2f:08:b3:2d:
2d:42:01:ef:df:a6:3c:ba:0c:8a:a2:7f:4d:8b:d0:
7e:ad:7d:5e:f8:0a:2c:ad:01:bd:f0:39:71:b2:9e:
dd:d4:fe:f3:03:34:ba:c5:10:1c:f2:1d:1a:65:35:
57:fb:b8:df:ad:54:d7:8f:0f:f7:6d:d5:d9:40:37:
a2:0b:ef:32:f7:d6:ec:4f:1f:8d:0f:18:89:dc:28:
23:ca:75:84:25:5c:17:e3:12:2d:9f:41:da:ca:a2:
df:1f:23:a7:a4:9c:37:1a:99:a4:76:94:17:24:2a:
1e:db:df:16:82:1b:87:e6:6f:fd:f9:1e:33:cc:6c:
ee:59:3a:08:58:84:41:8d:9c:f1:1a:99:57:a7:94:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:AB:8F:0A:5B:D8:64:1E:30:B9:B8:E0:21:06:FD:A5:B1:7C:1F
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:da:93:85:4c:79:b5:80:f7:0a:7b:47:27:b2:76:e1:86:
40:bb:3b:6e:76:4b:4e:63:8b:25:c4:c3:36:b9:d8:95:63:77:
d4:43:cf:ca:e1:5b:d3:29:93:07:4d:63:7c:10:14:c8:ba:b7:
0b:87:6d:bd:e8:fd:fb:4d:e9:ca:53:f0:27:d9:de:79:17:f0:
2e:13:89:ba:44:be:c4:12:48:e2:79:47:b9:b4:36:04:56:3e:
15:72:7f:3a:e0:3a:0e:77:ec:c1:61:7d:37:61:26:ce:bc:43:
94:df:60:c2:30:14:ff:6b:da:d6:66:e1:ee:54:0f:cb:be:33:
e0:fa:4b:e1:30:65:19:d6:81:2d:1f:22:07:b3:b9:1c:19:c7:
4b:05:40:76:bb:66:ea:7f:c0:8f:f8:35:ab:ad:16:15:c5:e8:
3b:7e:80:b0:c2:67:6b:06:77:e8:71:41:68:3d:81:14:25:72:
77:8b:c8:9f:1b:52:39:16:c6:80:10:85:3c:c1:b5:de:53:c0:
41:82:34:76:ac:69:13:33:e4:07:3e:50:c4:34:1d:2a:84:45:
50:a4:42:34:bd:9d:fd:e8:a5:74:4d:27:3d:74:b5:19:5c:95:
73:28:e2:0e:b4:de:10:55:50:e6:3b:09:d1:bc:95:9b:d4:c3:
c4:f4:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:36 2025 by rpki-client