Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: VaBMqeRzADlYNvQVrDibc960X0siEbnm23uVrl59CGI=
Subject key identifier: F6:F9:D8:13:F7:3F:91:69:2D:FA:E4:0D:2A:ED:F8:1F:0C:14:CA:F6
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0199FE472693D83A99EEC5EED6FACCF4AC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0923
Signing time: Sun 19 Oct 2025 21:01:39 +0000
Manifest this update: Sun 19 Oct 2025 21:01:39 +0000
Manifest next update: Mon 20 Oct 2025 21:01:39 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: KHtxHJgojvIp+FlK02Nh9EiCNZf54JKlEHiGJv7srbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:26:93:d8:3a:99:ee:c5:ee:d6:fa:cc:f4:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Oct 19 21:01:39 2025 GMT
Not After : Oct 20 21:01:39 2025 GMT
Subject: CN=f6f9d813f73f91692dfae40d2aedf81f0c14caf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:6a:0a:fa:d1:c6:ea:73:21:7d:2b:eb:12:
55:56:12:c3:f7:90:13:24:8b:fb:1b:76:e8:00:36:
8e:b9:f4:b5:be:4c:4e:77:ca:47:ec:25:5b:1d:06:
30:74:17:3c:03:75:73:72:74:69:5f:dd:a0:b9:17:
46:7c:23:01:0e:6d:1c:5b:de:0e:96:1b:8f:e0:fb:
bf:90:80:f9:df:65:4b:da:33:6e:b7:ea:ff:61:43:
ba:9f:ea:a2:99:86:ed:31:37:90:67:74:71:b6:c5:
e5:73:17:a4:9f:fa:5e:00:1c:14:5f:44:41:11:cb:
5e:42:39:e4:84:31:e8:c2:46:a9:b5:56:8d:12:62:
fa:86:97:fa:14:ab:b0:21:37:5e:d1:4b:ae:bb:26:
15:6d:ae:40:90:8c:d3:a3:c6:af:35:71:ae:ac:70:
42:97:5a:78:a9:b8:d8:00:77:d4:a2:e9:03:dd:89:
e8:4c:e3:82:40:7c:ed:76:8f:ca:c2:63:d3:c5:4f:
05:f2:81:b4:6c:de:e7:d4:db:f8:50:36:38:66:f2:
9e:13:11:b5:f4:8e:a0:10:32:b4:3d:7f:bd:15:3c:
ec:e8:88:45:c1:9e:c6:e1:64:d3:45:e2:4a:8b:3f:
57:08:03:4f:9d:c4:ff:70:61:c5:ab:81:05:15:63:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F9:D8:13:F7:3F:91:69:2D:FA:E4:0D:2A:ED:F8:1F:0C:14:CA:F6
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5b:ef:ea:62:6c:50:da:75:34:50:98:ce:93:46:f0:9c:2b:
60:b3:cc:97:30:56:4e:22:8e:7d:6b:ce:4e:24:43:18:1d:87:
81:73:da:f4:47:b1:1a:5b:67:d7:39:ed:06:b2:72:40:ce:d0:
34:bd:f2:d8:1c:a0:a6:97:2d:8d:1f:d4:27:32:8b:ab:32:51:
49:e7:7b:c2:b9:35:11:01:55:6c:fc:aa:95:ae:b6:28:c1:ce:
24:6e:7a:26:5e:63:24:30:af:aa:db:87:f5:67:c3:eb:cb:54:
b6:fa:f5:61:27:a5:23:c9:2f:9b:dd:b2:02:9c:0c:c0:33:97:
c3:f5:3c:b4:65:38:d8:9f:64:19:0b:61:6e:29:5f:9f:db:37:
39:af:93:24:00:a8:41:58:c5:f3:d0:87:b4:68:21:5b:05:af:
5c:64:cd:77:04:04:90:2f:02:6b:33:f6:c3:6f:49:47:d0:a0:
ee:2d:f9:33:3e:6e:64:8e:3e:d4:1a:fe:15:50:ac:f9:b3:a5:
49:df:b2:cd:4b:1b:3b:88:34:a9:cb:20:02:c1:3b:b3:17:ad:
2e:d8:fa:17:27:fa:5b:b7:8a:d7:70:5d:46:56:9b:92:b0:7b:
12:e9:80:89:45:95:77:0f:ff:1b:50:b5:ef:64:dc:c1:42:10:
1a:5d:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:41 2025 by rpki-client