Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: SHITecdq3aY09lSfDg0W4Z1UJ/2iGpU0OJl1LUslhGE=
Subject key identifier: A8:E6:B6:D8:EF:44:C9:2C:BA:24:04:4B:D3:B9:E5:BB:25:72:65:95
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019A1918CE37866CCC640FC001BC282CF05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 02:00:47 +0000
Manifest this update: Sat 25 Oct 2025 02:00:47 +0000
Manifest next update: Sun 26 Oct 2025 02:00:47 +0000
Files and hashes: 1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: XQ/alNZ/+SNLmoKxgPeTevQ8hT9E1xyaf6UZ6iUSaaU=)
4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:18:ce:37:86:6c:cc:64:0f:c0:01:bc:28:2c:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 25 02:00:47 2025 GMT
Not After : Oct 26 02:00:47 2025 GMT
Subject: CN=a8e6b6d8ef44c92cba24044bd3b9e5bb25726595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:b5:0e:fc:19:49:38:55:1c:ac:79:ea:63:
44:5f:86:62:e7:50:39:f0:70:82:f3:1d:54:da:e4:
30:07:33:1b:c4:6d:af:0e:b7:95:d0:bc:d7:6e:eb:
4f:38:0a:eb:b1:3f:bd:73:7f:bb:ee:13:79:96:62:
d7:f6:51:f3:54:bb:58:05:b0:36:3b:2a:36:7e:13:
2c:91:68:50:48:c5:02:f2:9c:d4:03:f7:e7:f4:3b:
65:a3:66:2f:bd:96:20:32:a1:58:3b:b4:a4:30:9e:
55:ac:97:c9:2d:eb:0e:ca:cd:48:6f:59:bd:24:d4:
b6:6a:ad:c9:c8:b7:35:1d:cf:5e:7b:81:fc:7a:f7:
9c:22:e4:d5:48:9c:aa:19:63:6a:b9:4d:df:e0:c1:
a4:b1:e2:e8:d3:c4:f4:89:4e:01:e3:f7:85:9b:c7:
e9:b1:73:ca:c5:78:43:1d:21:10:4f:13:66:12:b2:
e1:f5:c4:6d:c8:cb:9c:73:7a:4e:24:07:a9:78:e5:
74:8b:2f:eb:7f:64:97:45:50:91:79:67:31:6c:d9:
7a:24:1a:d2:51:92:aa:81:67:cc:7e:c9:82:e2:bc:
c9:d5:6e:70:ca:b7:06:5c:b1:c2:13:f7:48:7e:f7:
5f:87:7a:59:b2:f8:bc:92:ad:46:2e:a8:13:af:80:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E6:B6:D8:EF:44:C9:2C:BA:24:04:4B:D3:B9:E5:BB:25:72:65:95
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cc:ee:0c:9c:97:30:e2:46:5d:c7:ff:ac:2e:11:ea:ce:df:
50:b6:40:29:97:0a:19:75:34:e1:64:46:f7:8d:79:8a:62:6e:
b1:f7:0e:0d:3a:0b:10:74:92:6b:65:b8:0a:db:5e:fe:5c:45:
a8:72:70:78:79:1e:82:d4:01:36:c2:ed:62:d7:47:cd:79:ff:
9f:42:ad:70:c4:d3:88:0b:bb:6c:2c:ea:59:02:31:f5:ad:1e:
ff:b8:71:6b:22:8a:7b:22:00:6a:45:8b:1f:84:4d:03:c7:ea:
95:04:ef:7d:17:f3:13:5f:31:7f:07:79:d9:c8:66:db:ee:b6:
d7:e0:96:93:f2:1e:56:84:40:13:d8:98:31:c8:5e:d4:27:01:
ae:d9:b1:b8:d1:21:9f:0c:ad:7b:8c:4c:cb:fc:60:f1:84:72:
80:cf:94:31:cf:fd:4e:cc:30:f0:fc:f4:eb:6b:62:25:78:8d:
3c:d2:b5:79:64:ed:40:8d:1e:24:c7:04:29:26:69:81:1c:cc:
03:1e:27:c2:81:c6:bc:7e:fb:de:cc:05:78:18:5a:86:41:c9:
f2:a3:9e:a1:b3:43:2e:b9:d3:57:e2:be:77:da:b4:ba:3d:a8:
b9:a7:81:3a:b5:12:18:1e:d9:64:8b:1f:35:20:4a:5a:08:5c:
ff:ff:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:30:13 2025 by rpki-client