Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: JtcprsX4wXFfxwMvQSlILmEDZP4qSp+Yb0cqnRLy7Wo=
Subject key identifier: 4F:DE:95:1C:BE:4D:48:B8:01:08:1D:0A:DB:CC:A0:B4:19:5D:1E:C6
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 0199CBD96D01399D28D50330F9A860AF9D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 16C9
Signing time: Fri 10 Oct 2025 02:00:48 +0000
Manifest this update: Fri 10 Oct 2025 02:00:48 +0000
Manifest next update: Sat 11 Oct 2025 02:00:48 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: rKcifKveI+rseF3bFUWFR7iJJnWAk6nkrGshG4vpTNI=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:d9:6d:01:39:9d:28:d5:03:30:f9:a8:60:af:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Oct 10 02:00:48 2025 GMT
Not After : Oct 11 02:00:48 2025 GMT
Subject: CN=4fde951cbe4d48b801081d0adbcca0b4195d1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:21:15:65:af:c8:06:36:89:c8:ce:97:9e:
04:89:5b:ba:54:03:64:c9:03:05:d8:1c:7c:8b:e4:
7d:44:03:d9:6f:dd:1d:14:bb:b7:9e:27:65:49:ee:
de:11:91:7b:aa:c1:6b:05:2a:70:75:11:b2:8f:dd:
0c:93:c1:07:a4:80:34:56:5a:b2:f1:53:96:24:d5:
ad:b5:a9:06:83:d9:11:5c:2a:a9:c8:9d:57:5f:4c:
cb:38:8e:8e:4c:81:cf:8b:7d:d4:23:8e:2a:57:a5:
74:5c:65:dd:95:a8:26:b5:61:4b:9a:c2:db:1e:54:
45:85:f9:bd:4e:a8:26:bd:78:4a:35:a4:64:a0:31:
08:c8:9d:4b:09:a9:4c:06:30:30:26:33:4d:07:a4:
99:3d:76:d6:e9:85:78:0d:47:2e:de:f0:15:45:da:
68:24:53:36:aa:9c:52:99:6f:5e:1c:cb:a3:ae:9b:
e8:db:d3:c2:d2:07:33:66:6b:63:25:50:8b:21:05:
a9:e5:e8:29:c9:ea:bf:ad:46:c4:aa:7a:9d:55:95:
2a:d0:e3:bd:e8:d7:d9:4d:59:f5:ae:74:ca:70:21:
45:3f:48:ae:7c:b1:a9:e1:70:9f:68:2b:dd:5b:65:
78:60:bc:87:9c:1b:12:e1:a6:b9:f0:45:67:ff:cb:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:95:1C:BE:4D:48:B8:01:08:1D:0A:DB:CC:A0:B4:19:5D:1E:C6
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:77:b0:cc:d1:27:a4:03:fa:14:eb:44:ec:c6:ce:0b:6f:
21:8b:28:29:be:66:df:82:1b:e9:fc:e6:3e:d9:9c:82:bc:3a:
5f:fe:4b:1c:a8:50:9a:79:05:22:89:5b:4d:59:24:90:8b:b5:
65:81:de:54:d1:8d:2d:b0:94:e8:69:3f:32:94:0f:c5:a8:80:
8a:1d:29:e2:b4:70:aa:83:62:b7:e4:a8:0f:6e:47:f6:bb:82:
4c:b9:81:b1:5f:57:d4:01:f1:f4:26:bc:83:ba:6b:bd:86:a8:
c4:39:3a:a9:fe:cc:36:45:5f:b0:3a:85:da:62:e6:49:d1:69:
69:80:42:dd:93:51:74:73:e1:41:48:ca:3f:7a:91:d8:23:e8:
de:35:ce:e7:05:fa:f4:15:5b:66:4b:08:10:87:45:cb:37:8c:
e6:64:13:27:f4:75:9c:9f:1d:1d:27:e5:e0:22:1d:78:6c:5b:
7d:6c:a9:ae:af:ac:3b:e8:fc:f0:ac:cf:c2:1f:40:d3:1b:82:
d7:5d:5b:5e:c6:87:5b:06:85:7d:b1:40:72:63:ff:72:46:c8:
5b:df:3b:49:49:89:aa:50:26:94:8a:cd:29:8d:c5:51:99:d8:
c4:75:ab:0c:e3:6f:08:88:bc:18:8a:eb:ae:8c:0c:0f:2d:ad:
f5:10:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 10:32:40 2025 by rpki-client