Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: 8RZjuytj3ttBsJir/7fnk8BBQqhkgUr83Z9w6LFuMTQ=
Subject key identifier: 38:41:C2:0E:1E:14:F2:B3:03:5E:8C:C4:20:87:5F:C5:3A:CB:85:90
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 0199FB4596985ACFCC2A97B2837E39C6B548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 1108
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: tZRsonOwkeuSg6DJMWWeQtQPxIm/Aj5iZBMOOlud1ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:96:98:5a:cf:cc:2a:97:b2:83:7e:39:c6:b5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=3841c20e1e14f2b3035e8cc420875fc53acb8590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:e9:5f:b5:c4:cd:15:16:c2:76:63:2f:63:
25:0a:2e:76:01:9e:9d:14:6f:3b:e1:cc:5d:c1:57:
ac:e6:77:c1:f5:eb:3b:dd:dc:91:dc:9d:94:4e:0c:
16:ee:60:a5:65:c1:38:f8:15:ca:22:19:8c:e7:2d:
38:09:14:77:78:9e:4e:87:64:3d:26:6b:d5:51:0a:
3d:e5:1f:d3:ad:be:5e:4a:b3:ab:72:5d:43:0c:ee:
cc:7a:5f:03:4d:05:0a:6a:ab:0a:66:44:64:9f:fb:
1c:84:23:ed:cb:27:bc:cd:fd:3f:64:4f:53:08:27:
71:4d:22:31:bf:c7:ab:1e:78:79:f0:63:7d:d1:89:
31:b9:f3:47:1f:c9:6e:e0:5d:9c:48:6d:ac:fd:ff:
1b:1e:b4:9b:7b:fe:d0:6f:c3:9e:c6:35:16:d8:00:
0c:07:3a:ed:fe:90:a2:d0:cf:cd:e7:c5:64:3e:e7:
44:2a:2a:61:fe:4f:9d:43:5a:c0:e1:86:b1:e9:ec:
f5:a1:33:00:d7:79:ab:ee:02:99:62:21:03:e2:4a:
69:00:64:9b:7a:fa:c0:4d:7f:17:3c:88:d1:52:a3:
0e:c5:41:c1:5b:fe:3f:7e:46:e4:f9:31:94:2e:b7:
e1:db:57:6c:aa:67:79:f0:9f:7f:ea:65:73:d7:8d:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:C2:0E:1E:14:F2:B3:03:5E:8C:C4:20:87:5F:C5:3A:CB:85:90
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:21:7c:60:52:30:6c:6b:c6:8a:41:d8:22:f7:9e:54:a7:2a:
04:5b:12:d1:d8:6a:11:9b:c2:bd:5a:7f:b6:b9:6b:cb:09:2d:
ad:01:ac:84:11:38:48:74:59:c3:30:c5:f1:55:1e:c0:b2:a2:
e0:1e:32:df:09:43:b2:ef:50:34:c5:60:63:f5:96:a3:26:ff:
6c:c9:1e:d2:21:ed:b8:2d:2d:4a:18:72:37:be:ac:af:85:86:
20:df:45:48:61:e3:7a:b3:a3:2d:28:ab:5d:91:1b:bd:e6:d2:
82:d0:1f:59:ef:56:00:8e:5e:1f:ec:57:27:66:8a:97:6f:be:
c9:f6:71:f7:66:29:cb:2f:ce:3f:aa:c4:b1:fe:10:c5:34:4a:
2e:3a:a5:71:fc:f6:79:af:b4:c9:c8:9b:5c:55:45:fb:fa:38:
44:b9:64:b9:00:61:7a:df:a9:65:bb:96:72:e3:25:0d:59:32:
cb:41:71:54:fb:17:74:5b:a5:7f:a4:bf:76:c4:f8:59:63:78:
e2:45:61:6e:ae:98:25:bd:3e:9f:7c:d8:87:78:0b:b3:2f:2a:
33:c9:d7:84:86:81:d2:29:95:08:8e:ac:0f:7c:ad:23:68:40:
cc:da:ab:78:5f:61:1e:09:d4:03:4e:46:e4:b1:d0:44:67:cc:
d1:fb:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client