Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: /bUZ4ETEnCuBZ28YoWXYzbMCbmFGYS1UeKJ4t/uJApA=
Subject key identifier: 7D:AC:E7:AA:4F:3A:27:E8:4F:67:F8:9F:F3:7B:8E:19:BA:4F:FB:88
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 0199FC585A88B0AB286E8422963464309688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: CD
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (hash: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: WC/f/Y/04oMpoqvmRY6TxZGPjFakBxWPO3K8GomoP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5a:88:b0:ab:28:6e:84:22:96:34:64:30:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=7dace7aa4f3a27e84f67f89ff37b8e19ba4ffb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:fe:99:57:9a:17:cf:24:2d:f2:21:d7:6b:
05:58:09:7e:a6:2d:6f:0b:0c:ff:71:93:b9:9c:10:
a2:8c:20:90:70:b7:ff:12:68:c5:f5:b2:72:94:ea:
c7:67:5d:08:42:4d:b1:e9:1e:ad:73:cf:a5:26:3e:
b0:c0:9b:c6:85:e6:d9:26:eb:73:c3:74:15:76:b3:
88:f0:b1:48:15:3b:5c:cb:44:6b:8d:48:27:47:32:
4b:21:3f:64:e3:da:7e:07:e3:1e:2e:ee:71:1e:15:
32:50:d6:ff:db:97:70:d6:1e:99:c3:1b:36:c8:59:
b6:1a:9b:df:10:8f:2e:45:da:2d:8a:97:a3:65:ba:
b6:ca:28:18:1d:48:9e:a5:b7:93:14:84:0f:54:78:
18:01:a1:e8:4b:60:69:4b:ed:02:3d:dc:a9:a1:62:
2c:23:f8:b4:37:fb:4f:77:2b:9e:3e:d3:15:9c:2b:
22:f0:bf:13:db:f0:87:11:d1:c1:bd:5f:bd:6c:d8:
6e:df:56:c2:a4:2f:6b:d9:48:c9:a1:42:2d:b4:78:
73:aa:ed:ab:3c:24:3c:d7:5a:90:96:4a:b6:ce:62:
fc:68:5e:eb:cb:3a:f1:ea:71:3b:ef:d7:e6:55:5d:
ba:59:e3:bb:c7:41:e2:f8:b0:74:03:56:e5:58:ac:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:E7:AA:4F:3A:27:E8:4F:67:F8:9F:F3:7B:8E:19:BA:4F:FB:88
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:df:d4:82:a4:92:b0:df:0d:78:a7:50:33:29:1a:86:07:af:
56:2c:8f:84:37:87:43:4f:b7:6b:6d:bc:3d:67:60:1a:25:67:
24:95:2a:f8:01:ca:cc:5f:e9:ca:70:d3:df:1b:ea:21:b9:fb:
55:cd:0e:7b:49:f1:79:6b:7a:9d:b3:0d:6f:32:52:d6:2e:cc:
d0:18:71:ad:fd:a8:96:a7:4f:3f:6d:e5:8e:ae:b0:65:ba:fe:
7a:c1:33:27:d2:08:99:d1:01:56:29:a1:bd:23:95:5e:0b:0c:
5b:06:ad:9f:76:37:a3:49:ba:44:f9:77:b2:a8:1f:64:78:fa:
99:bb:c0:f2:e4:5d:67:e1:07:52:91:1e:2d:db:27:39:8d:4e:
33:4a:28:dc:cc:2e:0c:56:03:03:ca:f6:0a:8a:4a:77:c3:18:
09:a6:e2:67:24:b2:dc:94:b3:20:fd:29:ab:17:2a:66:5e:bd:
d1:10:13:47:22:13:13:90:ea:80:69:ab:75:75:92:43:0d:4f:
06:bd:5e:5f:6b:ee:94:e7:57:6f:82:b5:65:87:55:cf:62:0e:
71:23:4d:37:33:13:ff:c3:4a:f6:5b:ca:bb:81:23:92:3a:84:
8e:88:76:03:bf:3b:db:1a:d0:df:14:6a:df:07:59:5f:03:db:
a4:70:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:10 2025 by rpki-client