Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: /BvQcxVFSed2qD/kmqBZUTPyGb1NAxzdN75x4t41jyk=
Subject key identifier: A3:7F:57:DA:1D:8E:CF:8F:CC:1A:87:B3:10:71:B9:D2:94:5E:AA:EE
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0199FD33F7289EC4553E3F05125245B5DD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: aZXPgBQh2tkA/5sDQFIREA00okUMMbCN9CzcG3U+2nE=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f7:28:9e:c4:55:3e:3f:05:12:52:45:b5:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=a37f57da1d8ecf8fcc1a87b31071b9d2945eaaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:4a:24:dc:d9:ce:92:05:f7:43:71:b5:7e:
c7:11:19:37:52:86:94:a2:4c:1b:3a:15:e6:45:6c:
6f:bb:20:07:58:cb:85:4f:02:33:dc:30:8a:c9:d4:
9d:5c:25:86:a6:bc:7e:e0:8d:7c:37:62:58:19:32:
6b:e0:54:ec:fc:5c:7b:d4:70:8d:9f:3a:23:b6:63:
57:1c:43:fa:91:08:80:ed:03:1a:25:2f:de:8c:ce:
e5:65:2a:3b:4c:f1:c3:5c:57:0c:c5:dc:9c:af:e3:
09:b9:f5:61:fe:fe:ce:13:87:a9:6a:9d:ca:80:6e:
45:f2:fa:1b:25:35:9b:9b:06:f8:5a:e9:25:f9:27:
90:f3:89:1d:99:95:66:97:16:3a:14:04:6d:4b:d8:
4a:e9:ad:d0:52:62:ec:18:27:88:39:57:8f:8c:b6:
66:f0:19:de:ac:1b:12:0d:9f:75:3b:2a:07:72:82:
7e:de:6c:22:28:d6:fd:a3:87:d5:f1:6c:7a:b2:fa:
82:fc:44:4f:ac:21:35:44:d8:f8:5b:f4:15:2c:c8:
a8:9c:4b:e9:66:31:ea:f2:8d:fa:aa:56:91:41:c7:
31:c8:42:a6:4d:ec:7e:9f:9c:95:33:9b:f1:ad:ce:
14:df:8b:3f:23:75:d1:dd:0e:e5:a9:32:ab:21:5f:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:57:DA:1D:8E:CF:8F:CC:1A:87:B3:10:71:B9:D2:94:5E:AA:EE
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a3:11:15:4a:bb:04:2a:d8:d2:cc:32:e2:0e:27:08:a4:06:
42:ef:bb:e3:f1:e5:4e:ac:d0:61:46:f1:b3:90:bf:80:63:6a:
cf:c8:d9:21:89:5b:bf:05:92:30:3d:b3:b1:d1:28:cb:da:2e:
91:56:3e:92:43:fa:53:54:70:ad:d1:22:c4:26:75:69:59:57:
27:0c:68:30:8b:b4:24:10:79:00:b1:1f:8b:c1:a8:48:11:64:
9e:a5:0d:18:42:1f:14:9b:d1:b0:72:bf:77:e2:19:2e:cf:ef:
ca:73:d6:bc:96:2c:dd:66:3a:7c:91:da:27:3c:0e:ac:e7:0d:
39:31:7f:61:15:6c:b5:55:1c:61:dc:23:e9:25:73:2d:f3:b4:
5b:2d:c7:49:37:0a:e6:59:49:e5:1a:66:c0:ad:04:09:3d:1e:
fe:90:bc:4f:27:f2:73:d5:01:ea:08:86:9d:e7:90:63:cf:78:
f7:c2:4f:5d:4d:25:a4:d4:90:cb:5d:fb:ae:6b:b5:ab:b5:93:
ee:89:6f:48:81:0e:31:41:69:16:b2:a7:20:fa:3a:36:22:93:
bc:7f:b6:be:35:e4:0e:f4:95:88:d8:7e:2c:c7:a5:78:0c:9b:
bc:b1:ee:a6:27:ba:58:14:35:f8:57:cf:48:2f:c3:b8:42:1f:
23:51:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:16 2025 by rpki-client