Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: ejZRG4tVkIpHmVyeeezkOdLroyZlNUaWNJqTrXR//j4=
Subject key identifier: 38:DD:22:D0:65:58:E0:86:25:FE:54:63:1D:87:E0:65:4E:AB:B3:6E
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 0199575597AC1D96481C41C9D72EBA930D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 139F
Signing time: Wed 17 Sep 2025 11:00:50 +0000
Manifest this update: Wed 17 Sep 2025 11:00:50 +0000
Manifest next update: Thu 18 Sep 2025 11:00:50 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: aLnD7/J4+aCFA8pg+N9eZgx4XC5IHfLUXD0IWl/J9iM=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:55:97:ac:1d:96:48:1c:41:c9:d7:2e:ba:93:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Sep 17 11:00:50 2025 GMT
Not After : Sep 18 11:00:50 2025 GMT
Subject: CN=38dd22d06558e08625fe54631d87e0654eabb36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:95:93:5c:e8:58:68:6d:2d:d4:40:12:a9:
16:ff:31:13:30:32:8b:2a:96:8d:7c:71:ad:96:46:
f8:9e:f3:22:18:61:b9:9b:02:03:6b:22:49:79:8e:
2e:de:82:f9:19:36:56:e0:36:45:a4:ec:be:bc:7e:
56:3b:fb:50:74:29:d0:49:28:ff:0f:a7:dd:7f:74:
f6:82:db:c1:11:e5:e2:d4:ef:5f:10:e0:f0:45:76:
5d:3b:ba:64:44:d9:a1:8f:d4:e3:25:01:53:90:63:
be:92:43:c8:34:47:60:fb:a5:b7:01:c3:29:f2:11:
56:7e:c1:b2:ba:36:2c:31:e3:50:1b:13:ef:be:29:
02:85:9c:6b:ff:d4:a8:13:34:9d:de:b7:cf:36:24:
3e:60:48:e3:00:9f:a3:e3:90:ab:3b:77:73:aa:a9:
17:6e:8a:c6:38:3a:fa:f7:8d:87:e7:2b:dd:d0:2b:
76:7f:44:e0:d6:6c:00:f7:d0:3b:0d:c3:0d:1b:a0:
9a:26:8b:94:01:42:95:26:88:06:79:b2:c0:ab:ba:
ec:2a:ab:08:ed:1a:b0:d4:9a:2d:d8:a6:1a:e7:5f:
03:fe:2e:22:df:59:cd:da:86:a5:f6:40:75:35:fc:
33:98:13:e8:a2:23:ab:64:b2:58:ae:e0:58:7b:1c:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:22:D0:65:58:E0:86:25:FE:54:63:1D:87:E0:65:4E:AB:B3:6E
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:d2:d2:e2:11:17:e9:99:fc:63:fe:63:c1:b9:0a:43:3d:
09:b8:1a:be:74:7c:4f:3e:03:85:ab:d0:65:9a:1d:f3:66:95:
15:e7:da:c6:5f:80:db:91:4d:e4:18:0e:a8:8b:8d:cb:74:db:
cd:e2:10:1a:b9:c2:ff:c3:2b:c5:f0:ab:95:65:47:2a:61:d6:
fe:87:de:d9:52:6e:09:c3:39:98:58:23:56:a2:67:1d:47:b2:
f8:f3:1a:8d:24:e2:98:6b:0c:3c:b5:0b:fc:30:5e:fd:80:01:
63:c3:be:14:90:4a:06:64:02:c4:9d:2a:bb:18:a7:be:2b:ab:
0b:15:9e:a5:fe:d3:4f:23:be:eb:8b:35:fc:a7:5a:29:63:00:
b0:ec:c9:c0:40:d2:7a:2b:48:73:d0:18:8e:6c:46:50:09:3d:
bf:bb:00:a8:af:a6:63:19:10:29:aa:20:61:12:68:48:e5:91:
30:82:3e:38:a5:2a:da:32:c9:80:87:23:2c:80:b1:98:f4:81:
e4:10:33:13:d7:23:5b:60:10:27:78:7a:29:98:bc:c4:5c:9a:
e1:e4:a0:35:19:ce:86:6a:fe:ea:08:7a:61:06:31:e8:eb:ce:
b4:f3:a2:71:dd:43:12:2b:16:90:62:8b:ba:ec:51:9e:86:59:
04:bc:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 15:01:19 2025 by rpki-client