Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: JkSnN/rfEN1Al+AO38k5XYcEQ6A250vrCvHR2yCMNyI=
Subject key identifier: 1A:D8:05:22:90:54:1D:81:D3:87:76:EE:DA:7E:46:77:D3:5A:A5:B4
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 0199FC219EBAA82F08C80EF06CFED47EC9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0DFC
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: 6g10H61UZ7EZWBvQkUAVjVMBKkkSwe3XtnCPTYwlRDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:ba:a8:2f:08:c8:0e:f0:6c:fe:d4:7e:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=1ad8052290541d81d38776eeda7e4677d35aa5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:40:c2:b5:15:60:6d:4a:be:e9:90:b0:7c:
3a:10:7b:8b:4f:d8:5f:fa:86:a8:6e:00:f3:de:8f:
3b:f6:c1:8a:0a:1b:56:98:d9:30:32:11:74:2a:0b:
04:96:3b:9c:d4:52:9b:93:9e:c0:aa:15:14:ca:01:
e5:6a:ea:bd:7b:3c:0b:00:5c:69:b2:4a:f1:4a:c5:
9a:19:b9:65:ca:7f:d6:ea:84:18:3f:e9:b5:ab:55:
5a:61:e0:36:02:fb:a7:38:39:51:d1:aa:42:c2:8b:
ba:c9:7e:3a:50:d7:5e:58:39:d1:63:37:ba:28:ee:
98:02:8d:43:02:79:23:ae:a5:f7:7e:b2:11:9c:b1:
7b:c1:9e:12:5f:7c:56:d0:0a:87:55:e7:c8:39:8b:
6e:3c:d3:cc:10:4f:e9:22:c5:21:42:16:73:8b:71:
23:78:c3:0b:0e:77:67:e5:3d:81:8e:75:4e:ef:06:
bf:6d:98:5d:3c:c7:af:f3:b3:15:e2:a1:39:2e:0d:
b0:29:12:4c:98:a6:08:8d:e3:3c:93:c7:e9:22:99:
82:7f:86:c0:ec:26:1f:63:2e:00:06:94:65:0f:55:
f3:a3:05:81:9f:d8:56:b2:95:29:fa:99:46:23:2c:
6f:13:66:9e:35:ea:2a:9d:0f:b7:c2:a0:1a:bd:5c:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D8:05:22:90:54:1D:81:D3:87:76:EE:DA:7E:46:77:D3:5A:A5:B4
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:8c:6d:28:a3:ec:1f:31:54:29:36:00:2a:d1:1c:51:2a:
26:94:4f:2f:cb:18:05:52:fa:97:51:e3:bb:0d:5f:bc:a3:a8:
0d:fb:80:8e:b5:d4:4b:71:5f:2d:e5:da:2d:ac:d2:6c:a2:16:
5e:e3:61:c9:5c:17:e1:2f:f2:3f:d7:1e:45:92:25:8a:9d:52:
16:b3:24:63:93:b7:31:b3:26:50:af:0f:4b:e5:fc:39:6f:8c:
31:08:99:07:eb:51:92:5d:bd:2d:a7:91:a9:62:6e:8f:6c:7a:
da:e7:5a:70:15:0f:58:07:46:c5:46:c0:5c:44:20:01:22:61:
48:4c:fe:24:48:5e:70:86:14:48:6f:1a:23:5f:55:87:39:23:
ef:fb:c8:26:a7:40:c7:25:2e:3c:cc:9d:68:6e:da:1c:10:4b:
77:8d:20:85:9b:f9:cc:d8:47:27:2f:7c:7f:38:6f:dd:b8:5c:
04:47:19:1e:1c:90:39:1c:ba:72:2f:66:54:78:59:38:1c:3b:
42:76:48:bc:92:9e:34:e4:03:d0:4b:0c:02:c5:f5:82:d0:b0:
49:4c:35:fc:9c:70:08:5f:19:ee:d1:d5:d9:f3:1d:9a:78:53:
39:e1:31:fb:cc:81:b4:02:d1:38:07:c4:f1:8d:a5:76:23:b2:
7f:de:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:04 2025 by rpki-client