Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: j0210UQ3glo8MEVcE8an9t1yGbnHvF5LSJb995kdaxY=
Subject key identifier: 00:F2:C7:60:B9:4F:16:E2:E7:66:74:BB:03:C9:66:C5:92:40:4E:4F
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 0199616B7F2FE437DE7A7DF0FD2407849483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1693
Signing time: Fri 19 Sep 2025 10:00:58 +0000
Manifest this update: Fri 19 Sep 2025 10:00:58 +0000
Manifest next update: Sat 20 Sep 2025 10:00:58 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: KFTR+Itw8l71Buqvm6O3VkILpQu9Ma0iwelIimq18Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:7f:2f:e4:37:de:7a:7d:f0:fd:24:07:84:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Sep 19 10:00:58 2025 GMT
Not After : Sep 20 10:00:58 2025 GMT
Subject: CN=00f2c760b94f16e2e76674bb03c966c592404e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:d4:ec:ba:a9:43:05:53:ce:40:cd:29:53:
94:24:47:9a:91:27:1f:8a:8f:6d:c0:04:d8:47:ca:
9b:b7:44:a7:0e:ba:d3:3c:94:1c:9e:c1:8f:aa:28:
55:0a:b3:aa:ce:36:c5:27:83:84:4d:a3:24:a8:1c:
9a:15:9a:34:fa:26:0f:31:46:ad:07:61:5f:b2:0d:
65:76:92:31:32:8b:43:d8:06:41:b0:e0:68:52:e0:
b1:d1:fe:24:45:83:97:62:d2:59:cc:89:6b:5d:94:
d2:42:21:63:3f:e1:df:9d:79:c8:89:3a:22:6d:6c:
ad:a3:b1:c2:ea:d3:a8:a0:ae:ff:c4:1b:a0:ff:d3:
40:b6:f5:8d:b5:37:d6:68:9e:b9:09:9d:80:7e:ed:
0a:8b:1b:75:6e:f0:fe:5e:04:e2:c4:2f:19:37:c0:
22:af:20:d4:7e:70:d7:be:f1:70:9e:8d:b4:1e:e5:
e1:3d:5b:75:35:33:0c:da:56:90:03:2b:44:b6:65:
46:3f:b6:0e:1b:ed:d5:6a:61:97:fa:35:81:5e:be:
26:fb:f9:a6:ea:48:20:ba:22:11:84:72:9b:70:20:
5c:5f:7a:aa:27:0f:48:3c:c2:c9:1c:1c:8d:bc:8e:
f4:60:ce:6d:8d:91:18:2c:22:fc:07:25:7f:f2:52:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:C7:60:B9:4F:16:E2:E7:66:74:BB:03:C9:66:C5:92:40:4E:4F
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6b:4b:92:a6:41:9c:91:60:e8:d7:0e:07:ed:e0:40:d0:5e:
b2:b8:e1:8b:0a:8f:3d:80:b1:ec:9d:15:59:04:80:e1:e8:b7:
52:e0:4a:94:ad:df:48:f9:fa:bb:f5:bc:09:15:3f:a4:41:3e:
c2:86:01:5f:fb:eb:de:73:68:cc:72:e1:92:58:e2:30:66:7e:
23:4a:f3:7b:64:7a:f6:32:cc:ac:03:a8:40:fa:b1:b2:9f:60:
21:5b:9b:ca:5c:8d:1b:81:0e:5c:8a:6e:5e:2c:c8:d8:6d:6a:
7f:d5:e1:cc:b5:28:15:a4:33:67:ba:65:d9:f0:16:22:66:be:
cf:af:f7:77:79:53:b4:58:76:9e:6c:78:43:3f:fb:c3:63:41:
a2:69:c9:af:97:51:c9:bd:28:3c:1b:f2:77:44:98:a3:f6:d1:
5e:3a:72:99:36:9b:d0:5b:ce:59:bb:1c:84:3a:1a:42:4b:4a:
99:3f:d5:92:ad:43:5d:60:9c:ea:3a:f3:55:98:e3:50:a5:49:
5c:f2:d6:15:95:8a:30:2a:32:54:dd:15:04:7c:da:69:e7:46:
c9:e2:be:bc:c6:f4:64:21:65:e4:d2:5c:b9:d9:27:83:dc:70:
2c:f0:d0:ba:ba:61:fd:3a:1d:8e:de:64:60:52:04:e6:38:cf:
1d:29:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:15:59 2025 by rpki-client