Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: kyzAob3MRfwR9RK9e/0L4wKN/pNMQNC2badi4qiNMpA=
Subject key identifier: 00:F9:C9:26:96:6C:42:FE:A6:86:D3:2D:C3:A0:76:53:A5:AC:F7:73
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0199C45735275AA938F4C64E9044E4314390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0905
Signing time: Wed 08 Oct 2025 15:01:13 +0000
Manifest this update: Wed 08 Oct 2025 15:01:13 +0000
Manifest next update: Thu 09 Oct 2025 15:01:13 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: yPr4EVMCHGKZJCWVLCAlwU06ZQHn517msD8t1DROJZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:35:27:5a:a9:38:f4:c6:4e:90:44:e4:31:43:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Oct 8 15:01:13 2025 GMT
Not After : Oct 9 15:01:13 2025 GMT
Subject: CN=00f9c926966c42fea686d32dc3a07653a5acf773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:c8:86:33:e6:e0:ab:17:34:2c:ba:5f:f8:
b7:e1:cf:53:39:8c:b1:ca:db:f3:48:12:1d:da:46:
a0:5e:f2:64:5e:ad:dd:98:98:01:2d:a0:53:b1:c8:
66:96:80:4f:ef:82:f8:05:d7:29:d4:d7:e6:84:cf:
ab:df:58:4f:6d:78:b8:bb:e1:69:5b:11:d2:f2:7e:
dc:5b:c9:f9:c4:31:97:2d:10:52:f1:b4:24:9f:18:
c8:4c:53:04:3b:87:33:af:50:18:e6:49:c3:09:58:
62:0a:cb:ed:49:97:c6:9c:dd:91:3a:37:0e:4c:50:
9f:c8:cf:6e:ae:ef:43:6c:88:73:5a:f0:91:60:8a:
56:d7:5a:35:5b:01:d1:1f:8c:16:3d:6e:cb:55:d7:
79:a7:f4:85:15:a6:97:93:14:c4:e3:44:ae:95:9c:
7c:b9:4a:ef:35:36:af:a2:79:e0:b2:c5:1f:f4:ab:
2a:d2:3e:d2:65:41:95:c9:e8:a1:a3:55:6c:ac:e9:
32:24:73:43:9e:6c:4a:c0:63:7d:9a:4f:d2:a9:9e:
87:aa:75:94:3e:40:5e:bf:31:ed:bc:83:ac:b1:1e:
70:ee:47:c3:e1:84:0a:fc:e8:4a:75:2d:34:b3:11:
86:0e:6c:f1:af:1c:76:77:5e:70:d8:37:e1:19:9b:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:C9:26:96:6C:42:FE:A6:86:D3:2D:C3:A0:76:53:A5:AC:F7:73
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:22:d3:e3:e7:84:5b:aa:f0:59:3a:e8:2a:61:81:fa:a5:fb:
58:d8:43:f6:e4:66:36:6f:48:97:54:f7:61:b4:1e:23:d3:a9:
a7:f0:da:c4:7b:82:fe:7a:90:4e:1f:e0:b4:3b:1f:dd:88:5f:
96:06:d5:e2:11:2a:c0:05:50:73:4f:f9:98:9a:92:d1:c8:a5:
06:76:23:29:ba:f2:0d:3b:e1:3a:06:bd:12:d5:03:4a:c7:80:
82:e1:d5:5d:35:7a:3c:8b:f0:8d:a6:68:a8:cb:ea:67:68:c8:
20:60:5f:45:cb:2d:06:4b:26:93:e3:05:11:ca:ee:6b:2a:1c:
37:e5:b2:8d:92:06:2f:12:64:86:df:b6:41:4d:ff:5f:2c:c8:
2f:38:c6:45:df:84:24:13:de:86:97:03:3c:5f:60:71:a3:9e:
ec:c6:3d:63:04:2d:c8:f1:be:c3:e4:18:a2:23:e3:5a:43:ed:
82:69:b4:5a:0d:29:46:2c:c0:8b:44:fb:f7:75:a4:f7:09:39:
71:4a:0f:d6:3d:fc:14:6f:ec:6a:63:37:b7:db:00:aa:76:d0:
0a:5c:73:3b:c2:4b:62:7f:79:57:b0:d4:d8:62:32:b5:a8:df:
cf:f6:29:8c:d8:b0:05:79:6d:e2:27:f2:09:15:b5:74:da:ef:
89:b3:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:51 2025 by rpki-client