Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: dxzVImhjx4IFKX/FSkIwXYWdUNcrpeh1DukhKdFFz24=
Subject key identifier: AE:AF:CB:20:D0:67:EB:89:94:38:DB:42:71:0B:F7:EE:B5:93:18:DD
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019A1EAD0A463C9E74EBF8E9DAE08FFD93E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 16FC
Signing time: Sun 26 Oct 2025 04:00:48 +0000
Manifest this update: Sun 26 Oct 2025 04:00:48 +0000
Manifest next update: Mon 27 Oct 2025 04:00:48 +0000
Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: YHW9EfCgVmqGBSoHj7ZRpi9l6xkHCE/idKm50LWLAH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:0a:46:3c:9e:74:eb:f8:e9:da:e0:8f:fd:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Oct 26 04:00:48 2025 GMT
Not After : Oct 27 04:00:48 2025 GMT
Subject: CN=aeafcb20d067eb899438db42710bf7eeb59318dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:b7:b1:5d:9c:4c:3e:b6:90:75:f2:f7:03:
8e:df:10:32:51:97:4e:fd:54:cf:cf:ec:84:4d:91:
dc:79:f8:3f:c4:94:06:94:4c:54:8a:03:3d:e5:1f:
a3:e5:d4:6c:18:0a:40:ab:a0:a2:06:92:9d:15:71:
14:70:15:fa:21:d6:8a:5a:5b:ba:5e:4e:36:f0:4f:
97:bd:5b:87:e3:d3:94:4a:c4:3c:de:0d:66:b6:ce:
7f:96:12:e9:ab:ea:f8:7a:4a:6a:f3:21:eb:c1:5c:
f6:a4:29:ef:7a:69:70:43:d2:b0:84:0e:3b:d0:2d:
a9:8d:89:df:db:ea:9c:ec:1e:84:57:c5:1a:f2:50:
37:86:21:40:70:37:d1:77:9d:63:98:4e:9d:c8:82:
ce:67:2a:05:94:1a:1c:29:f0:12:f3:ff:a9:f1:57:
0f:41:29:e6:ef:1f:c7:6c:33:28:e6:15:b6:92:a1:
6b:db:f2:29:ae:83:3f:52:06:e2:b4:08:b7:ab:e5:
7c:f9:89:e6:ac:f2:4c:21:3b:bf:8c:a6:1e:c3:c4:
f0:25:2d:43:c3:ba:e2:f8:a7:16:2c:d8:6b:e1:ce:
19:08:d5:7f:bd:43:8d:70:c3:a2:ee:87:df:dd:ac:
80:90:19:75:f5:18:fc:96:2c:39:55:1d:53:a9:81:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:CB:20:D0:67:EB:89:94:38:DB:42:71:0B:F7:EE:B5:93:18:DD
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:4e:db:eb:b5:4c:82:7a:cb:0e:7a:74:41:c6:b6:2f:dd:
09:34:f8:c9:f8:2b:ac:66:18:dc:9e:7e:08:b7:19:71:f0:6b:
a3:38:0b:33:ae:1c:70:94:1b:6b:af:51:21:c7:29:98:28:34:
e4:d7:d3:ce:c9:a0:5a:18:c3:62:4b:8e:e6:81:e6:0c:3d:15:
67:c5:af:64:8e:73:d8:ce:b4:ee:be:42:23:70:a4:e6:7f:ad:
d3:7a:ca:f1:0a:16:28:86:1f:c3:48:75:d1:21:ca:7e:9b:fd:
5c:f3:7d:70:39:a6:21:58:b7:c9:8c:e2:58:5f:8d:74:7a:91:
68:db:8d:ce:4a:f9:e0:e3:cd:f0:9d:40:ab:78:04:b4:9e:0a:
f0:ce:74:b3:2f:79:54:65:4c:26:27:0d:01:f7:bc:8e:8b:b3:
b7:3c:51:25:fe:03:7f:a7:96:22:4f:ad:b7:82:af:5a:51:fc:
7c:cf:f8:29:37:71:9d:65:22:a9:18:f8:5a:8b:ff:04:eb:e2:
8b:34:a3:61:05:2e:b4:99:fc:b2:81:e0:1e:27:42:01:5e:2d:
cb:7d:7c:76:38:b3:0e:26:e2:c9:c4:fc:a4:2d:13:05:eb:25:
31:02:94:67:df:b5:e1:74:fc:13:ca:03:0f:bd:ea:75:c4:cd:
37:66:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:31:18 2025 by rpki-client