Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier: nxnbsePcB8Uj6aKHKE4Ivn4luIQ+5hGMKiEZ+yhQSns=
Subject key identifier: F0:2D:03:F5:CB:28:55:F2:56:02:2C:A9:8D:C3:EA:CA:0D:19:10:03
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 0199FDDA4929F3B66CA756CFC9A2DE48B3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number: 16CA
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=)
2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=)
3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: T8G8irRL/GD8eG5c98pJBIGi//2h0bUQcB287xjDPzc=)
4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:49:29:f3:b6:6c:a7:56:cf:c9:a2:de:48:b3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=f02d03f5cb2855f256022ca98dc3eaca0d191003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:cf:cd:24:c4:19:77:00:6c:9d:fd:22:c9:
29:59:7c:25:cd:b5:1f:05:c0:22:38:6f:90:51:c1:
0c:22:de:b1:c1:a9:83:94:8a:8c:e0:71:82:6f:ff:
0f:80:e0:c6:d5:fe:e8:18:74:08:00:22:e2:c9:6f:
c2:91:fa:31:89:d0:84:bf:ed:22:4e:46:4c:1a:49:
7b:9b:71:21:72:c6:f1:ca:38:ec:a8:6e:65:6d:8e:
17:ce:0c:55:b0:2a:b0:bc:cf:9b:b0:5a:93:30:d3:
34:d3:0c:b4:59:2a:bc:57:7f:88:7d:41:54:a0:ec:
32:c5:81:3e:3a:3a:70:b5:2a:6b:18:bf:e6:92:0b:
c6:67:83:12:0f:f8:32:b2:46:a5:e1:75:20:01:12:
64:ec:8c:a0:c5:39:aa:53:b4:90:6b:87:18:a2:2f:
c1:90:3d:3f:be:75:f3:63:f1:dd:60:06:94:12:a5:
7b:c4:c2:bd:3f:ab:59:e6:b8:ec:e0:08:60:bf:96:
0d:69:03:64:0a:61:f4:c0:37:93:53:01:67:e0:6f:
c4:cf:ef:12:be:28:95:b6:e4:df:6d:5e:ee:ce:a2:
ce:d5:c4:fd:04:51:52:e3:bc:bb:80:77:94:71:66:
b4:59:82:f1:a7:1b:04:be:a1:97:4d:99:5f:40:47:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:03:F5:CB:28:55:F2:56:02:2C:A9:8D:C3:EA:CA:0D:19:10:03
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:e7:0e:16:66:fb:95:0c:fd:c9:03:8f:28:9d:51:76:1b:
97:2d:06:71:73:de:51:36:cb:37:11:22:11:6c:17:c6:30:63:
5c:89:bd:24:e2:5e:c7:5e:e8:2b:0f:d3:37:f3:22:01:d9:29:
11:f7:25:c4:2b:4b:b3:32:01:b4:b4:aa:dd:b3:fa:9c:35:6f:
79:2d:5a:30:eb:f1:99:a3:bd:85:8e:ae:d3:11:f5:00:eb:33:
b7:73:e9:21:9d:fe:fe:3b:bc:c0:4c:dd:b5:e6:1b:e1:84:70:
5a:ed:4f:9e:89:df:39:e6:76:bb:cb:2a:ce:3f:dc:61:11:93:
e4:1b:69:78:03:13:1f:bf:12:46:fb:36:78:34:d8:2a:9e:be:
70:22:0f:a6:b0:b4:61:0b:7c:a4:03:01:25:43:e1:f7:54:e8:
16:b8:cc:d6:75:12:eb:54:1f:ca:98:37:d5:92:c4:c8:24:e9:
97:a7:6e:44:d0:eb:e2:31:4e:d3:cf:e9:33:7e:f6:59:2b:20:
d6:f1:59:9f:72:0a:40:ce:bc:10:e7:09:20:e9:f4:bc:ae:fb:
86:6d:9e:e8:40:c0:42:bc:14:8f:8f:61:4e:17:ed:72:84:30:
8d:b5:c5:6f:a2:5b:45:0b:6f:e2:44:59:cf:51:0a:81:bc:85:
0c:e9:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:24 2025 by rpki-client