Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: j97bLwgGZMV9/O6BmZIBETWaF39j1frXu3LVsQkyM+M=
Subject key identifier: BA:44:F6:36:E9:C9:6F:75:17:B8:A0:E4:54:AA:2B:C9:62:26:C0:F5
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019A266657BF3E97B16BA677B05FE5BAE661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 16D0
Signing time: Mon 27 Oct 2025 16:00:32 +0000
Manifest this update: Mon 27 Oct 2025 16:00:32 +0000
Manifest next update: Tue 28 Oct 2025 16:00:32 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: lyo+ZHtoLOfYluAX6s1U43Big8geMMr4ArN2mzBNSaY=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:57:bf:3e:97:b1:6b:a6:77:b0:5f:e5:ba:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Oct 27 16:00:32 2025 GMT
Not After : Oct 28 16:00:32 2025 GMT
Subject: CN=ba44f636e9c96f7517b8a0e454aa2bc96226c0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:58:fc:bb:41:aa:83:a5:9a:45:ff:1f:5e:
f2:19:92:10:8a:b3:82:da:31:66:b0:9b:dc:e1:54:
dc:84:02:af:c7:47:16:85:22:0e:1e:5f:d8:fd:20:
65:6f:4f:ac:ee:ef:c9:b0:fe:f7:b7:c8:81:ce:ed:
5b:f2:3b:16:f8:ca:3f:ac:f1:13:a9:07:6a:36:9e:
8c:03:78:cf:b5:93:77:a3:37:54:0a:76:90:18:1e:
5f:26:91:9b:46:8a:80:64:2d:bb:62:95:e4:e4:2b:
b5:3b:3f:88:e3:d0:74:05:d2:37:de:05:26:93:89:
06:c6:25:82:b3:95:90:b0:3a:7e:17:e0:75:24:05:
b8:07:b6:85:f1:fe:e7:9c:19:e7:f5:d4:d7:26:a9:
3d:00:b5:fd:2f:92:a6:b2:1e:e6:f1:c0:ef:c3:9e:
c4:e8:ee:69:b3:c0:3e:a9:53:25:d8:41:d7:06:0b:
6f:a6:7b:4c:92:41:3f:7f:a4:2a:e8:e5:a2:a4:76:
29:d9:16:5b:fc:84:0a:67:97:93:5d:2f:8d:5c:c3:
58:f7:d6:e4:51:a7:e0:e2:20:a5:ef:e6:5c:93:18:
b8:d4:91:a8:10:8a:58:08:91:e3:05:77:7a:30:4e:
18:47:43:59:b6:cf:55:bf:fa:cf:0c:c9:cb:40:d4:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:F6:36:E9:C9:6F:75:17:B8:A0:E4:54:AA:2B:C9:62:26:C0:F5
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d5:d1:71:ac:32:1d:84:d7:10:f3:bd:8a:a8:99:2a:3b:34:
69:91:09:d7:da:3e:ed:7a:d3:13:64:bf:01:85:35:17:ae:07:
30:62:9e:db:9b:ae:d8:cc:0d:22:58:f3:ac:da:b8:36:43:1f:
b4:5f:88:a2:e6:11:47:e3:3a:e8:ba:b4:e3:44:8f:a0:55:08:
d9:22:ac:c6:e1:31:a3:8e:e8:41:e8:14:6f:8d:fb:e6:3b:69:
89:53:92:07:64:15:d2:7c:0c:cd:fb:73:44:9f:e9:06:54:fc:
30:c2:a4:83:bd:82:3c:81:da:e1:ed:9b:7f:45:b9:41:63:19:
ad:65:b8:15:9b:5c:4c:3a:7c:0d:21:f4:0e:eb:2b:02:4b:21:
70:bf:05:7c:44:ec:0e:6b:d2:bc:8a:f5:a0:df:32:23:91:43:
1c:72:42:8b:4f:00:43:31:1c:ac:09:3b:44:4b:3d:e5:89:b5:
08:13:7e:3c:19:cc:a9:74:99:d2:24:8c:87:2d:24:64:40:51:
41:8f:0b:17:e3:dc:86:19:bb:b4:74:bf:2b:49:c7:1e:4f:63:
dd:96:8c:4c:ec:77:3c:b2:67:33:c0:94:eb:05:0d:a0:23:0f:
c0:7c:ba:19:3d:04:9c:ab:7e:da:1f:43:09:7d:4e:c0:ad:49:
f7:90:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:16:00 2025 by rpki-client