Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: 8CSQZcVZFCghjlYwF/Pidqi7WA3YUgAwBDyhyDaStn0=
Subject key identifier: 45:21:01:3F:E5:CB:AF:CC:76:06:BA:5C:32:E6:2C:A5:71:5C:36:DF
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019A24779AECBDDBCD12D8E194DD3F307238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0826
Signing time: Mon 27 Oct 2025 07:00:09 +0000
Manifest this update: Mon 27 Oct 2025 07:00:09 +0000
Manifest next update: Tue 28 Oct 2025 07:00:09 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: gU8JeokRhkDAHQ6w7rhF3w7IixPkeDZeD4Tulpl66kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:9a:ec:bd:db:cd:12:d8:e1:94:dd:3f:30:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Oct 27 07:00:09 2025 GMT
Not After : Oct 28 07:00:09 2025 GMT
Subject: CN=4521013fe5cbafcc7606ba5c32e62ca5715c36df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:34:37:f6:7a:e7:c4:7b:63:a8:31:55:f1:
ed:ba:17:78:fe:a0:be:be:8a:d9:56:b2:45:6e:0e:
11:a4:35:6a:ce:95:cd:f7:aa:9e:14:04:17:8a:84:
d0:96:ab:29:76:f3:bb:0d:4b:22:00:dc:ec:66:0b:
39:25:44:ed:3e:47:9b:1e:5b:66:6b:ed:1c:e3:8e:
e0:ee:d8:7f:e9:bf:97:66:da:93:ad:03:6a:24:11:
a7:c3:45:ef:db:8a:a4:38:0f:7d:6d:b3:ec:74:0d:
46:b1:97:35:12:dc:22:0b:0b:2c:20:c5:a9:11:43:
3a:89:83:81:ce:da:93:9e:7b:10:6e:dd:a5:a3:dc:
de:c8:92:c8:92:17:14:39:71:c6:eb:8c:55:10:e3:
1f:b6:84:e2:0a:4c:57:71:ec:49:14:84:df:96:e7:
2e:fe:da:68:a2:2b:a3:ba:d5:8a:b5:7b:22:44:2b:
b8:0f:4c:36:0e:7d:a5:88:10:df:0f:f0:04:a8:05:
67:4f:b4:1b:c9:cb:0d:38:de:e0:22:0c:b2:ab:56:
f9:d2:dd:7c:48:20:f8:5e:62:62:6f:f5:28:1b:06:
f3:1c:71:e7:89:27:6e:7e:4d:86:c8:e5:35:a0:1d:
f7:39:fd:d9:d2:2b:6b:9c:37:9a:da:0b:02:8d:af:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:21:01:3F:E5:CB:AF:CC:76:06:BA:5C:32:E6:2C:A5:71:5C:36:DF
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:2c:61:e2:6b:26:bc:24:5f:26:2f:75:30:15:02:b0:b6:
3b:98:63:97:39:2c:cf:6d:ef:89:2f:25:a0:56:f6:65:68:72:
79:f1:5e:d2:3e:17:05:32:db:89:d9:92:91:ed:d5:49:e9:05:
ca:c5:4d:d0:c2:66:56:54:43:8c:da:60:c9:a5:20:9c:a5:2b:
8e:83:3b:b4:17:ed:b6:21:76:08:f8:db:e6:df:dd:91:20:58:
28:7a:2b:e3:dd:70:80:a1:1c:36:79:16:e3:99:b2:67:00:02:
bb:8a:29:45:3a:6c:2f:9d:8c:32:27:ac:62:68:47:50:31:af:
a9:7b:2f:78:2e:47:06:3c:5a:e8:99:47:c5:9d:f6:97:72:15:
5b:82:84:59:13:b1:53:09:ca:8b:54:d4:8b:34:e3:7e:ba:f2:
53:87:57:01:7b:49:a0:a0:af:6e:38:1a:1e:a9:b1:87:b3:d3:
5d:07:6c:69:bc:3e:cc:86:7f:4d:cd:ea:33:59:f4:9f:4f:2f:
fa:0e:79:b8:8d:41:5f:01:ba:25:f8:ce:3a:28:98:fe:95:fb:
c0:33:ba:7f:64:1c:6f:5f:96:f2:6b:9e:88:02:a7:c1:e3:52:
af:44:a1:aa:d5:6c:b3:88:7b:6b:f5:c6:4e:82:08:81:11:00:
09:21:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:19:57 2025 by rpki-client