Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: 0TuU9ZbHhMFTft283FmGkepVCWs7b9VUyjSmpss4oWQ=
Subject key identifier: 34:BE:AF:5B:5D:C4:C1:A1:AE:F0:CA:6F:D7:96:DD:EB:92:F6:DE:72
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019A1BE262791D0EF6B7C1C464CCA8FAA944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 15:00:12 +0000
Manifest this update: Sat 25 Oct 2025 15:00:12 +0000
Manifest next update: Sun 26 Oct 2025 15:00:12 +0000
Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: kZeOXv83mN9XN634rdEdMpQBVIeK58eNgJUekNzxKNY=)
8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:62:79:1d:0e:f6:b7:c1:c4:64:cc:a8:fa:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Oct 25 15:00:12 2025 GMT
Not After : Oct 26 15:00:12 2025 GMT
Subject: CN=34beaf5b5dc4c1a1aef0ca6fd796ddeb92f6de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:22:b8:f3:fb:a1:8d:d4:88:dc:2a:c4:79:
b1:2b:ef:62:fd:da:e6:25:38:f9:52:27:f0:36:76:
7d:f0:bb:24:6d:f6:be:b2:1b:6e:3a:c5:14:5c:ff:
7d:38:05:95:5c:93:85:be:49:32:95:98:86:60:36:
7b:e3:95:8a:a1:15:1c:2c:73:09:7a:d1:f2:17:cb:
53:e7:7f:f8:ac:88:b6:92:a5:c4:31:e3:29:7b:ad:
15:29:0d:88:07:34:5f:33:af:41:92:92:71:d6:d3:
18:77:2b:4b:9b:3a:35:17:c4:5a:07:bd:16:b4:1c:
cf:cc:21:4c:22:06:7f:bf:63:44:d0:fd:3b:ca:c9:
cb:af:26:8e:d5:c6:74:6a:46:dd:98:ed:bb:9d:cf:
63:db:10:64:9d:36:14:f4:c2:cd:0e:40:23:d0:22:
7b:1f:77:99:87:ee:8a:36:a5:16:44:76:46:50:94:
fb:ee:38:50:2b:e8:2f:37:d1:43:3e:a5:cf:fc:d4:
ac:d3:43:9e:8c:c8:82:d9:4a:43:ae:fb:fa:8e:3a:
55:a2:53:49:47:d2:ff:b6:0e:c0:0d:22:9a:75:67:
da:59:8c:a4:55:3b:6b:f3:d5:df:9a:16:c0:aa:69:
0c:60:9b:8c:e9:bf:27:82:d3:66:d3:90:aa:b5:9d:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BE:AF:5B:5D:C4:C1:A1:AE:F0:CA:6F:D7:96:DD:EB:92:F6:DE:72
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:51:f2:9b:d8:5b:14:12:5a:b8:e2:77:be:31:79:1e:7c:
d5:7c:2e:ea:d1:b2:d6:13:52:7d:ad:1f:b1:b0:b0:86:1d:99:
37:44:c4:99:61:57:90:59:05:af:9f:5f:0e:bc:ec:e5:e5:df:
b1:3c:91:ca:ee:ac:89:4e:21:7a:40:b6:a6:19:f9:63:97:be:
86:53:98:07:67:f7:53:85:b4:b0:6b:89:c9:55:ef:ea:bb:74:
e8:a0:fb:12:fa:4f:89:53:47:04:58:ec:fc:e5:d4:71:5c:f5:
c1:11:f5:5c:92:50:dd:c6:97:0f:38:84:8a:c2:d8:49:f0:09:
86:b4:fe:f2:41:08:6e:cd:bf:f2:07:de:44:be:02:13:cb:1d:
99:dc:0c:f0:20:20:16:64:c9:bf:3a:1a:69:e5:e6:e1:94:3e:
d3:6e:a3:89:ad:cd:ea:41:0c:b3:d6:ce:31:f9:04:11:ac:0f:
bc:b7:79:c5:88:3a:7f:90:6c:bc:41:73:5c:75:5e:1d:6a:c0:
75:b7:e1:71:ea:18:97:30:c9:5b:83:f6:b5:82:53:c6:59:65:
0a:63:ec:08:ba:b9:3b:3e:4f:a0:2a:01:dd:c3:ef:b4:85:22:
33:4d:4e:e6:a6:67:f0:f7:aa:09:e0:3c:52:c4:d6:77:e2:5d:
70:6e:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:09:35 2025 by rpki-client