Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: yT5+Wi0E8vU25f6QXTzXvi8OaO7pwFm5ygp45XV6CD4=
Subject key identifier: 40:E2:09:47:D0:02:B3:A0:A1:57:AB:83:83:F2:FB:58:F4:DB:A9:64
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 019A0035951AD52206E68A0522F6D10E0E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 13E0
Signing time: Mon 20 Oct 2025 06:01:42 +0000
Manifest this update: Mon 20 Oct 2025 06:01:42 +0000
Manifest next update: Tue 21 Oct 2025 06:01:42 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: uUVLNOM4ujt8cyd8LABK1nM8/BN06CzQWdGyq/YEgC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:95:1a:d5:22:06:e6:8a:05:22:f6:d1:0e:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Oct 20 06:01:42 2025 GMT
Not After : Oct 21 06:01:42 2025 GMT
Subject: CN=40e20947d002b3a0a157ab8383f2fb58f4dba964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:22:cb:e0:4f:23:16:95:fe:72:50:f6:b8:
69:e8:28:3c:18:65:3f:03:d4:c3:76:bf:a8:3d:f9:
a7:30:45:96:ce:8c:4d:83:09:1d:62:9a:b5:15:76:
c1:4f:6a:b9:0e:56:0b:51:87:a7:d1:e7:2a:02:55:
b5:29:11:80:2d:ff:69:36:b8:d8:12:1d:03:c3:ff:
f6:82:d7:5f:b3:cf:97:e5:3a:25:17:a6:89:69:dd:
c0:f5:9b:5b:d9:98:14:ee:b5:00:90:4e:1f:b0:4d:
9c:e3:42:c3:fb:2d:23:8d:34:0a:c4:b4:29:5d:16:
61:87:88:8b:52:d7:72:32:2e:45:01:23:bb:9e:fb:
29:0c:8e:4f:a0:52:0a:e9:75:77:ad:2b:2b:88:a4:
ba:07:ac:04:28:4e:1a:fc:f0:97:dc:a2:cb:6c:f4:
86:3a:9f:45:38:2d:76:4c:28:58:34:ad:f8:42:a0:
de:10:6d:c2:11:5d:39:39:6e:3e:5f:9c:c3:b4:af:
be:84:64:22:4c:b7:c4:bb:c0:8a:ea:a3:a2:50:f1:
6d:42:f6:0e:6d:97:ea:d0:78:ca:f7:e3:cd:12:02:
dd:bb:85:b6:b7:7e:76:ac:84:c6:e5:e6:c9:ed:2b:
6c:43:26:4f:01:13:21:21:98:c3:6c:48:5d:dc:6e:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:09:47:D0:02:B3:A0:A1:57:AB:83:83:F2:FB:58:F4:DB:A9:64
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:5b:52:d1:39:89:d1:44:9b:2d:35:aa:b4:f7:e7:c9:a6:
a5:29:6e:5a:70:48:11:93:17:fe:65:97:5a:f1:9b:96:4f:b0:
62:9a:5c:20:e9:39:7a:08:dd:3a:64:a7:5c:14:91:8f:77:91:
d1:61:2c:a3:7f:9a:41:85:5c:e8:a6:3f:45:46:e3:be:60:d6:
70:f1:d9:a1:8a:a9:8d:59:64:a4:18:82:44:e8:39:80:65:70:
2f:a2:94:8c:0b:2d:14:ad:d4:9a:bd:65:bf:67:da:39:87:47:
93:9a:89:dc:70:2c:fd:c3:3e:31:0a:a2:86:85:eb:f1:1b:6e:
76:96:7b:0b:a2:7a:9c:6b:8a:ff:1d:7b:db:0d:13:53:7c:d3:
ee:79:3b:06:c1:d6:53:ea:15:60:ba:7d:9f:6c:56:5a:37:01:
f0:43:f9:37:56:5a:6b:52:ed:75:55:57:8a:df:d2:07:e7:03:
97:d7:20:68:38:99:d7:0c:94:92:5b:e5:58:a7:94:b8:60:f7:
f1:0b:2b:ad:8a:ca:33:0e:7e:0a:6b:a2:20:50:91:63:d6:7c:
ef:be:63:89:d2:95:32:27:9f:af:a6:3f:30:20:2f:1a:7f:4b:
12:05:bc:47:56:b0:04:e7:9d:dc:af:82:33:78:1e:ba:cb:82:
10:fc:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:29 2025 by rpki-client