Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: 8z+R5PV8weC6Kx+NXijPzqycJAb0rOxr1Vi+mdAR770=
Subject key identifier: DD:5A:61:22:72:C0:EC:74:57:59:6A:C3:2B:D7:53:85:78:D5:1D:65
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0199FBEB9AD256698B9D15DE0131AE7EE933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0F90
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: 6RCDHSCK1fmalUatZuQ8MCJkuK6L6qxw0rFWeWx9M0k=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:d2:56:69:8b:9d:15:de:01:31:ae:7e:e9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=dd5a612272c0ec7457596ac32bd7538578d51d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:e3:38:04:bf:b5:09:c0:4c:4d:38:89:06:
c2:95:14:1b:04:fa:b7:3a:48:1d:5e:47:b3:67:97:
cd:b6:3e:37:22:3d:00:70:e8:40:70:dc:ff:bf:36:
b6:68:d5:5a:e6:59:af:da:0e:a4:53:6a:67:00:16:
62:98:76:a5:50:57:93:9b:49:9c:51:21:5f:58:82:
76:b2:a5:2f:ce:b6:02:15:fe:52:22:05:e4:4d:00:
ca:b3:0e:df:95:b0:87:9f:15:7e:4e:f1:0a:40:6c:
2a:16:90:4f:51:69:48:b1:1f:33:f9:74:54:19:60:
38:be:b1:70:b8:1a:cb:15:09:13:e8:80:45:41:b0:
e8:d8:91:d8:5f:b8:1d:0d:d9:12:60:8f:ec:76:28:
5d:ba:a8:0a:ec:61:10:48:4d:5d:87:72:b3:07:3f:
79:b0:f9:64:9d:9b:fb:7c:c7:be:28:7e:21:13:7d:
d1:79:46:fe:28:f9:62:6c:e3:0c:9d:ef:72:56:35:
fc:e4:ec:4a:57:74:2b:a8:98:cb:ee:34:63:53:c8:
cf:7e:86:ec:ad:6a:89:3e:0b:ba:56:19:01:c3:88:
89:bd:bd:aa:34:80:1e:7b:f6:1d:b0:95:76:91:8d:
cf:3e:55:43:b1:94:ba:0a:52:ab:5d:d7:e5:66:84:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:61:22:72:C0:EC:74:57:59:6A:C3:2B:D7:53:85:78:D5:1D:65
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:d0:30:29:1b:9a:d7:92:f4:ea:11:88:2f:3d:9f:94:c1:
91:c0:f9:0c:0f:6b:f9:ab:40:81:6f:f2:4c:36:15:b2:b3:10:
31:2b:8f:88:1d:69:2d:7c:72:f6:2b:be:4e:61:b8:77:06:5c:
7f:09:0c:0b:b8:68:b4:57:b5:e3:2f:a0:0b:c6:b1:02:71:52:
25:d7:dc:be:a8:71:8e:fe:62:7e:d5:d6:f5:6e:61:7a:d9:e0:
7c:d8:d3:23:9b:b8:eb:df:c7:db:54:b3:33:27:d4:1a:51:87:
0d:71:34:1c:7c:72:1d:09:c6:8d:16:c3:4a:a2:4c:4b:09:05:
5d:b0:2f:3e:68:ea:68:91:21:f3:03:f5:10:fd:d8:b6:cc:2c:
23:0f:b1:9d:76:e5:45:a2:86:68:5a:46:f0:9f:ca:d3:55:c4:
36:fe:96:8d:89:1c:1a:09:9a:75:53:fa:91:af:44:70:ae:31:
93:ea:4a:05:2f:89:cd:73:be:88:a1:57:bf:04:b5:4d:28:39:
cf:51:a9:cd:fd:50:7e:88:90:8a:18:74:7f:05:8a:e8:0f:86:
2d:05:d1:55:20:71:c7:e3:aa:e5:dc:cc:2c:0a:18:54:9d:2a:
18:8c:d9:3c:95:29:97:39:c8:fe:58:d5:9b:1c:f3:df:16:a4:
4c:ce:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:12 2025 by rpki-client