Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: cDq10nN80hBZyNdIwzPYVc9cvbt9ooPsj/9xm7LX98o=
Subject key identifier: 96:83:04:39:33:27:85:8E:B1:AD:55:BA:B7:A3:AA:78:F7:9E:3B:BA
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019A15E0B6578C17A488A219B35B3CA4CFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 16FA
Signing time: Fri 24 Oct 2025 11:00:39 +0000
Manifest this update: Fri 24 Oct 2025 11:00:39 +0000
Manifest next update: Sat 25 Oct 2025 11:00:39 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: 0wqAaaDGmkeyVa75C4m5rND5F43MK1eLxyd5MpYCnvY=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:b6:57:8c:17:a4:88:a2:19:b3:5b:3c:a4:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Oct 24 11:00:39 2025 GMT
Not After : Oct 25 11:00:39 2025 GMT
Subject: CN=968304393327858eb1ad55bab7a3aa78f79e3bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:bc:5c:5a:ed:44:0f:1a:d7:82:53:8d:d1:
42:2d:b2:50:4d:17:42:27:bf:d5:ac:93:d9:1c:9a:
e3:2b:52:41:62:44:9f:fd:ce:66:58:4b:69:fd:24:
84:02:e7:4e:f2:8b:50:53:ea:a2:14:49:7e:6c:37:
17:20:c0:95:ac:2d:88:b6:6e:47:09:2e:ab:dd:74:
4d:3d:67:79:b3:17:ca:04:38:f1:c9:7a:f7:43:c4:
7f:75:f9:96:82:96:35:c5:a4:67:7f:8d:1e:d4:7b:
33:89:41:64:9e:a2:fb:9e:d2:80:af:c6:e7:42:29:
86:77:21:9c:b1:a8:8d:e9:33:36:b0:8b:6d:b0:fd:
9c:56:f4:86:ee:c1:cb:87:5c:8c:bb:e8:fd:c6:c5:
a0:41:68:e2:a3:93:88:71:14:12:a0:64:79:e8:8a:
0f:23:cf:c7:d9:bd:b2:7b:40:1b:d6:2e:85:f9:86:
ad:73:1c:22:10:e4:c7:e4:b1:13:ee:46:a2:cb:fd:
c1:37:4d:f3:0c:c8:0d:c7:20:99:06:5b:67:80:a3:
25:98:14:19:85:ad:5e:e3:8a:0c:55:24:51:94:84:
a1:e3:7c:6f:80:3a:76:0f:6d:30:f0:81:5f:4e:0d:
9f:c0:22:8f:14:f0:f1:a7:2b:01:db:c8:79:af:18:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:04:39:33:27:85:8E:B1:AD:55:BA:B7:A3:AA:78:F7:9E:3B:BA
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:08:4c:f2:fa:7f:b3:cb:68:18:60:17:5a:0a:3e:2a:7d:
09:7d:42:1b:d7:10:47:27:c6:a1:6e:29:2d:03:4a:76:f0:75:
3f:35:0e:a4:a4:60:8c:99:b1:82:dc:b5:60:a2:9d:e8:aa:17:
ea:be:04:57:02:fa:01:9f:80:9a:49:45:98:87:0d:2e:9c:b6:
6c:c3:09:30:40:60:e2:91:0e:84:56:01:b0:73:b9:1f:d1:f3:
9e:c2:02:eb:3b:f8:b4:ba:0c:9e:ad:b1:dd:fe:24:a4:a6:a5:
92:e6:ed:44:1f:f4:1f:f1:5c:48:74:09:87:54:e6:76:6a:0b:
ae:69:92:94:3c:30:3d:1f:14:44:50:80:2f:20:0b:a6:a4:12:
ee:e2:f8:6e:0d:5a:3a:27:d5:ef:46:2c:f6:bd:20:f2:34:f3:
90:b9:7b:9c:6f:87:1a:3e:93:b6:84:ab:3c:18:31:6e:66:8e:
f8:16:25:a3:8c:cf:f8:b1:f5:29:12:1a:1b:7f:f0:f1:6c:90:
e5:63:6c:b2:6c:4c:4c:de:08:d1:da:54:38:1f:8a:ab:cc:d1:
cb:46:db:b1:90:6e:f4:92:8c:3e:a4:a4:12:ec:36:18:33:53:
66:77:14:21:34:89:fc:c2:ba:b4:fd:51:96:a3:44:dd:7f:16:
03:f5:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:53:58 2025 by rpki-client