Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: SGf46PNYDG3aaFvqMMxRlxRNTzp52YmHvx0YqRcJntA=
Subject key identifier: 16:A1:C6:66:8E:64:35:5A:14:50:7A:C4:FB:C9:5A:76:36:CC:3E:D9
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0199FDD9DDD4FF6F2EBC73F670D18D85785E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 04BF
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: 3Ike+kurEFBbs1jzFAG2FfwCEm7fCKw5FS0sIZfWkAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dd:d4:ff:6f:2e:bc:73:f6:70:d1:8d:85:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=16a1c6668e64355a14507ac4fbc95a7636cc3ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:27:12:e0:ca:79:9f:bb:d4:23:b0:69:43:
b1:f8:a0:9e:eb:8d:04:35:9f:b7:97:3e:69:b4:96:
96:79:01:86:f5:3f:c5:24:74:b1:94:46:31:fb:be:
75:26:ac:ae:b6:f0:ff:9e:b1:fa:97:6d:10:20:2c:
e1:61:58:b8:cc:2a:d0:65:97:ea:5f:59:a1:84:26:
e9:a0:09:aa:c1:03:5b:d9:71:ea:65:37:c2:75:2b:
b9:78:e5:31:e4:51:db:00:52:c5:85:50:7a:b4:dc:
17:72:39:4a:b4:a0:73:cb:7f:92:36:ba:b9:2f:d0:
6f:90:e5:78:7e:7b:67:3e:41:8c:da:86:ab:2f:06:
80:61:e2:51:22:b4:28:55:59:3b:37:73:1e:6a:ac:
3e:ae:6d:82:28:49:70:d5:d4:fa:08:51:ad:d1:7d:
fe:4b:00:a5:7e:35:30:87:d2:75:55:15:5f:ab:a3:
4b:1a:4e:79:1a:a0:54:45:88:02:37:88:17:c6:3d:
c7:e4:61:cc:1f:b1:da:c5:b3:8a:e8:70:e0:ac:a6:
06:dd:70:98:dd:01:e7:2b:91:9d:9e:bc:3f:52:d0:
b4:aa:26:8a:d3:da:fb:17:c7:a4:0c:66:bb:81:a7:
06:53:0d:d0:9d:b6:ca:ce:7d:c9:07:5b:eb:50:95:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:C6:66:8E:64:35:5A:14:50:7A:C4:FB:C9:5A:76:36:CC:3E:D9
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cb:a2:c8:46:02:aa:cb:4c:3d:56:12:57:32:80:f1:7e:a2:
88:38:cf:fa:71:b1:9e:d0:d8:7a:2e:db:29:cd:2c:ba:56:ce:
ac:92:af:d7:cc:ca:4a:f9:25:63:e1:d8:39:8a:50:ab:02:05:
d6:b7:5d:5f:fd:ec:62:b4:b5:99:0e:e7:a0:95:ea:67:db:08:
87:f8:4c:96:01:bc:e1:fb:34:74:2d:eb:41:7e:57:2e:39:1e:
0f:6b:d5:39:32:62:8b:7b:92:4f:46:a8:86:03:b0:ca:17:aa:
37:33:f5:ca:54:75:d6:14:70:a4:e1:37:1b:f8:a4:6f:21:49:
87:5d:d3:0b:c2:3b:12:9e:47:20:11:fb:39:ea:a1:79:92:c2:
fc:a8:ae:a2:52:72:37:11:41:a4:5b:2b:6e:74:fb:8b:c0:4a:
b1:3a:7f:46:d1:94:e2:6f:af:80:dd:61:33:66:25:f0:c1:fc:
b4:47:a8:c2:de:11:ca:3f:21:a8:bc:8f:5d:48:76:4c:96:cb:
e6:8f:80:d3:0f:e6:d8:92:8f:3e:84:8e:00:d3:59:ad:f0:c0:
dc:34:e8:c6:98:15:1d:9a:e8:f8:f5:15:de:82:ef:93:ef:a6:
00:46:36:7e:d1:c3:51:d5:d5:d2:31:b3:2b:f3:e7:e6:db:7c:
d7:79:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:05 2025 by rpki-client