Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: +eV3FBdhq9qrb2kt4jnJwKFlURv8EoQHW+VXO5DmtdQ=
Subject key identifier: 0B:0C:8F:25:70:49:B3:30:EA:13:7D:38:4E:CA:9E:08:6E:9E:F2:F4
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0199FEB53B2EE5EFBAE6DDD19EB4C967C295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:53 +0000
Manifest this update: Sun 19 Oct 2025 23:01:53 +0000
Manifest next update: Mon 20 Oct 2025 23:01:53 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: +OuZXWuZ2cf/77DV5Yyn2x6HPBgsRNVPGQGkf3872+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:3b:2e:e5:ef:ba:e6:dd:d1:9e:b4:c9:67:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Oct 19 23:01:53 2025 GMT
Not After : Oct 20 23:01:53 2025 GMT
Subject: CN=0b0c8f257049b330ea137d384eca9e086e9ef2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ce:48:60:da:7b:b1:2b:9a:d6:3e:cc:91:
33:fb:96:94:4d:73:4e:2a:90:c2:16:9a:50:3a:40:
d5:3a:0d:f0:a0:5c:b2:e9:c1:65:fc:85:6f:7c:99:
6e:6d:25:88:85:76:46:28:cd:1a:55:9b:e7:ed:07:
97:f2:f7:8c:41:23:9d:bd:85:50:5c:b0:e7:65:8d:
27:a8:9e:bf:09:57:d5:52:e0:3c:5f:c7:6a:7b:e1:
82:bb:83:8f:6a:20:c3:38:93:98:9c:21:9e:51:f4:
2b:b6:1a:87:27:03:cd:78:04:5b:e9:60:12:19:17:
03:cd:90:74:f4:a5:ae:25:ac:8c:90:5c:7d:af:29:
10:b2:01:32:44:c1:8b:5f:a5:93:74:02:65:61:74:
8c:ca:5d:46:5e:17:5d:a5:7e:2c:4b:2d:00:a6:9f:
a0:b7:21:28:bf:e9:28:df:06:9f:78:36:22:9a:50:
e2:56:a1:5e:13:f5:3b:8a:a5:1d:7d:e9:90:ea:df:
71:ac:0c:53:01:2f:90:dd:f1:47:9b:45:ac:9f:66:
7e:b1:fc:42:f4:af:b5:1a:13:e9:02:dc:2f:18:39:
1f:a6:f4:16:98:1a:37:47:51:7c:4c:0e:65:fe:3c:
d9:f1:c1:10:27:f3:b5:c1:47:39:ea:d1:8c:57:67:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:8F:25:70:49:B3:30:EA:13:7D:38:4E:CA:9E:08:6E:9E:F2:F4
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:85:ac:5a:ed:bd:6c:38:03:55:9f:f4:c7:1d:53:4c:57:
d9:ad:78:91:61:ce:31:14:4b:c1:d1:ff:b0:18:4d:48:b2:f5:
fd:90:cc:26:fd:ed:65:d3:f1:67:ef:b2:04:1c:ca:f0:d5:f6:
2e:c9:ce:5f:b6:ff:84:03:75:bd:08:a1:5b:4d:10:2f:86:84:
4c:61:5f:a5:5e:27:80:bd:cd:82:eb:b5:f0:a9:d0:0d:dc:15:
60:f3:fb:47:cb:e5:ed:f8:43:85:0a:36:44:93:71:87:bc:9c:
a1:c2:25:87:4c:37:49:18:83:b4:71:80:27:f6:51:d0:cb:68:
7c:37:cb:ef:57:5c:49:71:62:d5:7a:a0:88:7c:e8:69:7b:dd:
c8:c7:42:65:01:69:3e:14:ae:62:23:f1:7d:ba:2a:ec:75:67:
3c:3d:8f:46:20:d4:7b:78:15:ac:9c:ec:9b:39:31:68:f4:a5:
0f:81:c8:91:a4:46:01:92:0f:0e:84:67:bf:f8:56:da:b1:77:
fd:64:58:79:55:d3:3b:ef:59:c8:f1:f7:5c:f9:23:e8:a8:01:
d7:20:f1:b3:d7:f5:1b:40:f6:1e:e8:e8:88:86:0b:d5:de:9c:
55:0a:ed:91:ec:06:45:7f:07:8d:75:28:28:6f:93:eb:d0:c2:
60:cd:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:29 2025 by rpki-client