Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: VWVhzMNUp2KoUMTUtNKLDRGEfRyM+oQFaH7MJdHWgo0=
Subject key identifier: 1C:0F:63:D5:76:23:B2:52:26:C9:6D:AB:D5:6C:AB:E6:5A:08:E9:46
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019A2252503CF77E115AE694E43E8B5451C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0181
Signing time: Sun 26 Oct 2025 21:00:11 +0000
Manifest this update: Sun 26 Oct 2025 21:00:11 +0000
Manifest next update: Mon 27 Oct 2025 21:00:11 +0000
Files and hashes: 1: gpSFuAfs-49fboUul0as1hNOe7s.roa (hash: a1c1k2V4AvypPkcspZ9MdLob1wApcJ4k2MzGZWzvoow=)
2: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: S8jaiT8Ifnaoutgy69pHNAfkABn4wycdrV1yeV/Vn58=)
3: vaMAEqjcMkvH6y-5OvFOz1w_mU4.roa (hash: keZjBn73pIW4PKlhodbog2eBUEbjStbSn55ErmksOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:50:3c:f7:7e:11:5a:e6:94:e4:3e:8b:54:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 26 21:00:11 2025 GMT
Not After : Oct 27 21:00:11 2025 GMT
Subject: CN=1c0f63d57623b25226c96dabd56cabe65a08e946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:96:0c:dc:56:60:fa:80:f9:cf:c4:7b:96:
54:64:32:78:a1:c4:80:65:21:f3:50:6a:db:f4:eb:
b2:1c:b0:82:a1:b2:41:fa:0d:84:05:58:67:5a:b8:
05:9b:6e:b2:da:6c:a4:36:84:b9:d1:1a:b6:ef:67:
af:ee:72:f2:0b:a3:3a:24:43:4e:79:ae:2f:8e:70:
14:ec:5f:02:a8:87:f8:19:81:aa:e7:69:dd:41:eb:
fb:58:b6:a6:f6:04:f7:c7:c0:05:a8:3e:e7:3d:a2:
77:f7:b2:b0:84:06:03:ff:2c:5f:e6:24:1a:62:65:
88:2c:c7:f5:ae:cc:d7:68:0a:8d:d4:80:52:62:ad:
47:ef:6e:d1:36:d0:2f:1b:f0:f9:f6:f7:8d:b4:82:
f2:f4:24:ba:1e:b6:45:50:b0:0e:57:0e:69:fa:21:
8c:8c:fc:6e:fc:70:04:a0:ca:a6:4c:56:a9:45:64:
29:35:66:29:c7:f3:a8:dc:95:75:28:e8:eb:74:40:
ba:3c:03:86:73:4b:19:e1:4c:af:07:4f:a6:17:38:
ac:0c:90:f9:7e:a7:fd:3a:22:5a:b1:42:1d:07:c3:
8e:43:75:81:97:1b:0d:e5:6e:da:07:ae:cb:f1:40:
ac:8a:98:51:4a:69:14:9e:e1:1f:65:96:03:85:37:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:63:D5:76:23:B2:52:26:C9:6D:AB:D5:6C:AB:E6:5A:08:E9:46
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:d9:b6:18:2a:06:97:48:4e:ee:80:09:87:10:b4:3a:be:
b6:fd:4f:28:56:a9:4e:02:bb:33:ea:8b:e0:a6:d9:18:48:02:
41:ed:15:79:9d:6e:7b:a9:4a:86:da:bb:1e:b3:59:7d:f1:7d:
97:d2:6b:3f:65:7e:00:ec:fa:72:d7:53:c4:e9:04:26:23:f6:
fd:b9:18:18:7b:5d:af:ec:27:d7:dc:b0:64:ec:fd:1c:1d:a1:
e1:b4:44:56:ac:45:19:79:1a:d6:44:e6:af:c4:f3:26:ab:1d:
09:7f:62:de:47:30:d3:d8:a0:d5:28:1f:18:cc:8f:69:33:3a:
7e:0c:de:7f:04:5d:0a:9d:68:7c:28:52:ea:27:dd:7b:0e:98:
fa:dc:8c:28:d5:c9:d2:4e:4f:af:3c:ca:0a:13:1f:6f:d3:01:
3d:8e:16:3e:e9:24:14:e8:d4:fd:12:5e:ae:46:53:1c:6e:b0:
ac:d1:23:3c:08:70:93:f4:f9:bf:c2:77:0d:b1:ff:4b:3b:fb:
65:16:26:c0:8f:8a:0d:e5:ab:b9:8a:55:3e:6f:4c:ad:79:05:
f2:3d:60:84:97:d0:7e:72:d0:c4:f9:4d:3e:af:35:6c:57:63:
df:2a:71:93:93:99:c5:b7:f8:38:85:69:a1:08:85:80:34:1d:
8f:4f:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:52 2025 by rpki-client