Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: e5MRgLmdjLYUp1RalD950R5M2Kk5UClgE+pW4dxDgYY=
Subject key identifier: 06:A4:36:ED:FC:60:5F:E8:8F:D5:F7:1E:DD:4A:44:0A:58:E1:65:E8
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 0199FD33E9337D263A1FCA9424C3C49B188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 03FB
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: pXyLfNAXca0joExwkww78ELvRUUyuQsKkQG2XwjA854=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e9:33:7d:26:3a:1f:ca:94:24:c3:c4:9b:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=06a436edfc605fe88fd5f71edd4a440a58e165e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:90:e2:48:53:dc:76:1d:3c:a4:03:85:20:
0d:e0:30:19:20:ec:76:a9:ee:ab:0c:45:9f:9b:b3:
b2:89:09:25:3e:d3:17:ab:ca:e8:d8:bf:0e:79:1c:
3c:a2:88:f1:b3:d0:87:b5:33:72:e1:fe:7c:34:f3:
90:c7:25:e0:01:6b:d3:23:95:6a:82:9b:57:55:b6:
75:ee:95:53:f2:cb:10:74:89:92:54:c0:82:a0:51:
4b:e6:69:47:50:80:f4:30:1b:3f:78:ec:b6:f3:b5:
0d:7b:49:60:b6:55:05:e6:a6:75:a8:b6:7a:18:d2:
5a:0d:08:ef:03:32:c9:8d:b4:d0:89:7c:b3:8e:bc:
f9:a5:d8:7f:d0:c5:b7:19:f8:f9:e4:c9:fc:5b:f0:
46:7a:65:68:8b:eb:22:0b:1d:8f:a1:06:0e:fc:5e:
42:2c:d1:9f:70:cc:2f:af:a6:d1:e5:dd:7b:71:f6:
4e:30:5d:2b:3c:e0:65:f8:08:e0:04:d9:38:fd:8a:
bb:43:d3:53:09:a6:22:a6:fb:dc:89:71:3d:ab:77:
ee:3f:cd:18:55:c6:df:18:a2:c7:55:83:a9:b6:8c:
83:4e:9b:29:d4:83:9a:e0:87:4c:a1:33:fb:e8:86:
56:7e:44:96:10:85:0f:3b:25:8a:dd:a0:e5:ab:10:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:36:ED:FC:60:5F:E8:8F:D5:F7:1E:DD:4A:44:0A:58:E1:65:E8
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7b:2c:b3:18:82:68:d2:1a:eb:18:17:87:3d:64:7f:76:8c:
d7:8e:7e:f2:90:5e:6a:6f:11:d8:f1:ab:b5:d9:4b:91:41:1b:
54:91:7b:c7:10:a1:72:0b:83:83:c3:1b:b5:9f:f4:7b:cb:5b:
04:37:53:cb:45:9f:a4:b5:db:d1:68:2c:c6:8c:52:3a:d6:c0:
1d:f0:89:da:7c:5e:17:32:f3:47:8c:6d:21:ed:33:28:eb:27:
64:ea:d8:c8:43:9c:b4:45:88:61:c5:0e:42:2e:67:79:43:37:
79:f8:60:fc:96:c7:a6:01:82:25:ae:78:36:8f:a5:11:fb:14:
34:41:a0:50:fe:eb:9d:51:f7:4e:b3:00:48:60:e0:59:61:4e:
73:78:02:19:ae:7f:07:06:ff:11:5d:fc:0f:39:56:77:ab:b1:
48:55:0f:71:0c:37:64:f9:81:00:76:a1:cb:3b:1a:c7:49:99:
55:c4:f6:3a:4a:9f:34:1d:95:61:52:9c:cb:95:ce:b8:73:15:
41:60:92:ca:6b:28:7f:f8:c9:9c:9a:d9:85:6f:57:c7:36:35:
5b:13:32:88:b9:21:a7:15:61:21:3c:5a:51:ad:84:99:42:07:
ff:9f:38:b4:47:77:14:ac:10:45:ad:d8:18:87:3f:7a:86:1e:
f4:b3:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:33 2025 by rpki-client