Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: xoPd4A+xjysHdWeWfxDARgNT99XJOwUUutLLsxFDZj8=
Subject key identifier: FB:29:97:A4:65:4B:61:1F:08:12:21:F5:26:19:A1:81:3C:93:A4:8E
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019A01B537D482252E0B8169BE94C38BA88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 13:00:44 +0000
Manifest this update: Mon 20 Oct 2025 13:00:44 +0000
Manifest next update: Tue 21 Oct 2025 13:00:44 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: a4xc2ghkraBb+qIoAiiCd5m2YEsdPxRGzzJ784na5kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:37:d4:82:25:2e:0b:81:69:be:94:c3:8b:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Oct 20 13:00:44 2025 GMT
Not After : Oct 21 13:00:44 2025 GMT
Subject: CN=fb2997a4654b611f081221f52619a1813c93a48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:df:49:58:90:42:06:13:be:f6:9b:50:ce:
e4:b7:41:18:4d:90:80:28:42:38:ea:c3:2a:7a:29:
f8:46:b2:4a:e5:95:88:9e:60:fd:f5:c5:1d:d5:27:
93:5f:cd:ab:88:40:dc:9b:29:4f:9a:19:8e:39:f1:
34:f1:63:7f:61:f5:f4:01:dd:9b:f6:62:f0:de:2d:
ac:bf:01:9d:12:d7:67:dd:04:56:36:76:20:89:7c:
85:c7:fd:4e:e1:b2:3a:31:44:2b:3c:d4:84:a4:6a:
ac:fb:ea:05:3f:3f:2e:8f:25:f9:1a:53:f1:53:01:
c4:75:00:fa:18:98:66:05:93:12:fb:07:75:de:24:
4a:1f:ee:c9:45:78:be:13:22:f7:58:77:67:3c:ef:
6e:9f:b5:13:6c:38:fe:35:67:69:d8:b6:24:eb:b2:
0e:6c:8e:a0:cc:ed:6c:54:43:fa:76:d9:06:0f:f3:
77:bb:ba:64:45:8e:b9:91:ef:66:03:77:cb:bd:79:
89:65:da:3e:ae:61:29:88:c9:31:66:34:fb:6a:88:
2b:a8:cd:f0:5a:9e:94:f0:93:fa:6f:b9:b4:84:58:
25:8a:ff:55:96:5b:c9:2c:c6:d2:c5:26:2c:af:23:
1e:e8:50:3b:1b:84:c0:3c:86:9d:05:39:60:19:da:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:97:A4:65:4B:61:1F:08:12:21:F5:26:19:A1:81:3C:93:A4:8E
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:26:dc:e0:06:16:41:b1:1e:2c:64:68:9a:c2:09:6a:0a:
d1:97:ac:1e:0a:0d:d0:a3:99:60:ea:6d:e3:ff:02:5b:dc:21:
20:fd:c9:db:cc:42:64:4b:19:fc:c6:a5:96:44:dc:ee:9c:57:
09:ce:b6:87:41:33:5b:51:bb:f4:5a:a8:f8:72:30:2d:59:4e:
06:08:d0:23:5a:7e:bd:e6:79:3d:6c:05:dd:ee:ca:92:31:2b:
39:52:93:4f:26:20:ce:fe:4e:da:8f:8a:31:2d:90:20:88:fe:
c4:7d:c9:e1:62:99:94:b2:50:02:05:b9:cb:2c:f3:26:4d:d9:
a3:b8:53:8b:90:d9:92:e0:48:d4:8f:e6:1c:72:63:c0:df:d6:
04:00:84:b2:7b:3d:30:f5:e4:6d:64:7f:9f:06:23:8d:b0:76:
2d:fc:3f:df:fe:fb:42:4a:6e:04:ad:ad:83:6a:44:a9:82:90:
b6:9b:21:e5:ae:78:b3:5c:ff:a0:c6:67:21:f0:ca:61:b2:72:
50:34:0c:21:26:9d:4c:cf:f9:f0:eb:06:8d:8e:f3:fe:b1:89:
cf:3b:6d:49:7d:01:cf:a5:a9:33:06:ea:9b:7b:53:4b:ab:d8:
26:7f:bd:40:83:f1:2e:53:87:6d:cc:ab:1c:f4:c9:9d:1d:bd:
16:fa:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:18 2025 by rpki-client