Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: OiFVLmlvGbhsQcvafIGb5RgnRDJ4cQWlMoEWNSa709g=
Subject key identifier: 67:E6:50:4D:96:10:ED:12:32:D8:08:DA:EF:60:9F:6C:8C:00:47:EA
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0199C457997D02164FE37F91F238B3F94D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 13C1
Signing time: Wed 08 Oct 2025 15:01:39 +0000
Manifest this update: Wed 08 Oct 2025 15:01:39 +0000
Manifest next update: Thu 09 Oct 2025 15:01:39 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: D0mRDOgH5TgU8RAbzjD1X8Yvjox8O7uxq0UgvxfWSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:99:7d:02:16:4f:e3:7f:91:f2:38:b3:f9:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Oct 8 15:01:39 2025 GMT
Not After : Oct 9 15:01:39 2025 GMT
Subject: CN=67e6504d9610ed1232d808daef609f6c8c0047ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:4e:4b:ee:50:12:59:46:ac:92:bd:02:a0:
37:2b:d6:cd:38:09:6a:74:bb:2c:d5:34:d1:64:0c:
81:c4:5e:6d:23:80:cd:91:a4:83:90:a7:ea:f9:b9:
15:19:be:9f:86:13:6d:9c:0e:bb:5d:7e:1c:76:c2:
9a:c7:fc:3a:14:b6:2d:a0:8d:5b:dc:3a:3b:72:ae:
8e:53:55:ff:b0:23:30:b4:19:32:22:2a:17:22:9b:
e2:a0:a6:27:85:8e:36:93:a5:5c:90:f1:06:63:1a:
b1:40:b3:91:4e:cf:7e:68:3a:3c:d7:fd:3d:c6:3a:
d6:86:fa:65:7c:b1:73:f7:6a:59:84:fc:ba:ee:b9:
c1:1d:85:40:83:da:b2:61:eb:81:8c:19:e5:28:61:
71:a5:16:a2:c0:51:87:de:c7:67:6c:63:b6:2f:44:
11:eb:80:4d:2f:6e:82:26:20:fc:c9:b4:52:21:01:
6b:67:e6:75:7d:fc:be:aa:3c:11:6c:9c:3b:b0:92:
b8:9c:c8:b5:34:b9:0a:44:19:96:d3:fa:05:79:5b:
7b:f8:79:2d:f6:4f:d7:6c:26:93:06:bb:83:40:61:
c2:d1:57:2d:ed:3e:73:5d:4c:bb:03:9f:93:2e:d4:
fb:c2:1f:68:a5:37:42:8e:f7:b7:42:f1:a8:4b:b7:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:50:4D:96:10:ED:12:32:D8:08:DA:EF:60:9F:6C:8C:00:47:EA
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:c1:d1:9a:43:c4:23:d6:05:54:82:40:ba:d4:e2:6e:22:
46:80:b4:76:d8:fe:fb:1a:4f:95:bf:9c:07:51:70:03:e7:53:
c0:21:63:c0:dc:85:ef:f4:29:31:00:7b:9a:db:bf:77:e7:b8:
54:72:45:4a:14:db:18:52:53:b6:6d:2e:5c:93:f4:d7:11:86:
13:62:c5:3c:cf:ab:22:69:28:08:54:78:ea:e6:29:5f:5b:32:
9a:81:04:c2:cd:89:15:c7:69:62:1b:f5:fb:15:a7:47:d9:c0:
18:f3:1d:d1:d0:bc:2b:88:0e:e7:b6:b3:5a:31:87:50:86:22:
51:48:51:83:fe:63:2e:20:03:ed:af:92:4f:8f:6e:f8:ca:9b:
62:6e:e3:82:f9:de:70:33:f0:4f:d6:d1:28:9a:49:ea:b0:3b:
9c:87:56:be:bd:e2:47:54:03:73:0c:3c:1f:6e:ef:e6:3c:4a:
52:75:b4:d0:5d:4c:63:d6:3e:49:e4:b9:e6:10:04:bc:3a:e5:
76:c3:22:c3:97:c8:78:8d:eb:28:53:18:fd:1d:bc:58:5a:0f:
58:ea:19:e8:d6:fa:95:10:80:97:1f:e8:32:a9:82:d5:4e:e4:
75:73:57:84:1a:8b:7e:4f:e2:77:8a:8b:94:eb:c7:ec:9d:25:
e1:57:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:53 2025 by rpki-client