Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: JIJK/c8o7ATac+3+ueenFEzUiVzml6+XvE/5NoLGnho=
Subject key identifier: 04:AE:BF:B1:BC:28:7C:3A:29:AB:67:4E:6C:C4:1A:24:C0:64:1C:53
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0199C5D8645F793D61813F08C2BE199736A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0260
Signing time: Wed 08 Oct 2025 22:01:56 +0000
Manifest this update: Wed 08 Oct 2025 22:01:56 +0000
Manifest next update: Thu 09 Oct 2025 22:01:56 +0000
Files and hashes: 1: 03JJTsh3_NxSyDqdFphknmP33b8.roa (hash: szPjfA1cFWRBJE505TkRbPwWz6ZdxsCR6EMZQbYyh8k=)
2: 8XR7h36ge8nmbDN7W9KPs8BbJ3c.roa (hash: GTuL6O25ML8XEc7mNE2xR66FzTvaDOZ81oIFP7CYxtk=)
3: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: bEVCmnZMRqO9BROV5gVeC7FgLMQdfpcLWVFRNb+Jrd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:64:5f:79:3d:61:81:3f:08:c2:be:19:97:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Oct 8 22:01:56 2025 GMT
Not After : Oct 9 22:01:56 2025 GMT
Subject: CN=04aebfb1bc287c3a29ab674e6cc41a24c0641c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:93:0c:29:76:2d:1b:18:b2:a9:05:f5:ac:
05:1f:91:ea:36:63:20:60:c6:d7:e2:af:d4:78:fd:
23:e0:b0:24:ba:08:fa:a2:1e:cc:f8:1a:00:c2:6a:
42:c8:b6:44:fc:75:8d:ab:6a:e3:76:fb:3e:ea:6a:
1b:be:d1:51:b1:62:ae:d1:d0:78:7b:29:28:c4:42:
e5:ac:b5:3f:a6:d4:6b:7d:c4:c1:20:a5:8a:a7:33:
5b:dc:76:60:fa:43:17:75:75:c2:21:40:31:c6:ea:
c7:55:73:15:a5:97:35:4e:db:73:e2:d6:b2:5b:fc:
d8:2c:44:98:9b:22:ae:15:cf:ad:35:5e:c2:bc:0a:
f9:96:db:cd:57:31:fd:a0:ef:60:2b:fe:2e:3f:f4:
f4:32:49:bb:74:75:af:fc:1e:c7:5b:a2:8c:60:1f:
56:7c:1c:28:41:7d:6b:54:6a:0b:cf:e8:32:88:8a:
8f:68:98:90:b7:9c:af:0e:30:fe:8e:23:2d:e8:08:
e8:e3:87:1e:41:c9:d0:87:12:72:79:88:53:ab:04:
4d:54:b3:2d:7c:2a:2f:4b:6d:3c:f0:cb:3b:91:e6:
d9:d5:75:4f:4b:b9:23:67:8c:93:50:66:b3:09:4b:
f5:bc:10:ae:c4:48:50:d5:9e:ba:6b:1a:c5:b4:25:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:BF:B1:BC:28:7C:3A:29:AB:67:4E:6C:C4:1A:24:C0:64:1C:53
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:db:4e:44:42:90:ba:61:a6:3d:a5:31:da:c5:6c:a0:17:
7d:49:b2:58:23:1b:6e:27:ee:0b:1a:e8:5f:e6:0a:77:47:21:
28:56:fe:95:65:90:d8:44:be:02:36:99:d0:44:e1:10:0e:8c:
e6:6a:56:b3:f0:dd:0a:bc:ee:8c:c8:8f:00:c0:de:b6:80:89:
01:be:55:52:e0:52:b2:8d:79:bf:43:33:9e:e1:a3:a9:34:9e:
89:5d:da:0f:e5:78:f0:3c:46:bb:83:5d:38:a5:6d:0e:4b:4f:
cd:37:47:9b:e3:35:0f:3f:1c:35:24:57:8d:4c:c0:8a:c1:a6:
94:b8:f0:2e:4c:df:f7:aa:d3:e4:e5:a4:f3:0e:14:43:3d:21:
a8:fc:d3:8d:2b:50:29:cd:c3:f5:41:71:5d:4e:6d:65:46:f8:
97:7a:36:33:d1:60:81:d4:20:cd:0e:36:67:df:a7:38:64:72:
f8:3e:bb:17:23:11:b8:8a:55:4e:4b:ee:85:9a:84:ee:be:4f:
71:ad:41:36:97:8a:84:c7:44:d0:1b:7a:65:a7:7d:d0:e2:fe:
29:6e:69:9c:b6:c2:86:52:78:71:c9:a2:6b:83:0e:5e:8b:f3:
e1:36:60:23:ac:58:4c:60:e7:ff:42:91:4e:a6:c6:c2:ad:15:
20:73:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:52 2025 by rpki-client