Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: aPBE0Y9MM2QHjruGeyrmxbjD+3LtsaknvnNtIFzYmCs=
Subject key identifier: F8:C5:C5:13:F4:7E:52:34:ED:11:54:7A:5F:3F:86:73:43:4F:77:A1
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 019A09A51DA7175224F3B53FC2D06D18CE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 02:00:07 +0000
Manifest this update: Wed 22 Oct 2025 02:00:07 +0000
Manifest next update: Thu 23 Oct 2025 02:00:07 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: onVxKM7FvGPuzlIq/dyRBArHFwmCovPOrvnWBuNpBmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:1d:a7:17:52:24:f3:b5:3f:c2:d0:6d:18:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Oct 22 02:00:07 2025 GMT
Not After : Oct 23 02:00:07 2025 GMT
Subject: CN=f8c5c513f47e5234ed11547a5f3f8673434f77a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:4b:cd:b3:7c:be:13:17:49:33:ac:fc:86:
e7:fc:0d:85:88:f9:cc:22:4c:bf:c8:ef:52:4a:ff:
60:0f:91:36:05:b7:2b:c2:d6:36:58:31:04:62:9b:
6b:c9:53:b9:0f:a4:00:a0:c0:85:05:46:86:54:ba:
6f:0d:91:79:54:73:e6:85:5d:80:76:4e:76:7f:a6:
8e:f7:b3:29:42:0d:df:54:ee:75:02:65:03:21:83:
a9:d6:99:52:c0:6f:aa:f2:e8:3e:06:7f:9f:d8:32:
e2:c7:4f:45:08:48:3a:d9:b7:8e:df:12:e5:83:c2:
d1:7b:64:8f:f5:96:53:f4:dc:e4:96:be:24:62:33:
84:f8:e6:92:8a:fc:c3:8e:16:e2:0d:97:b2:aa:2a:
6b:ce:0c:65:56:a8:ef:9f:06:5a:bd:4a:c0:d8:6e:
0c:b2:3e:e1:bc:af:c6:4a:37:ff:d8:bd:01:e9:73:
63:e3:84:3d:fe:53:58:00:d2:43:42:e6:5c:87:5e:
92:d3:22:6e:83:69:2c:4e:59:14:b7:60:8a:53:01:
02:3a:39:ec:5a:57:4a:e8:25:d5:a7:06:ec:e5:73:
35:02:fd:f1:d7:3e:b6:41:bc:8e:b3:8c:d5:66:50:
d2:ad:f0:e7:64:59:20:d9:03:cd:f9:9d:7e:8e:19:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:C5:13:F4:7E:52:34:ED:11:54:7A:5F:3F:86:73:43:4F:77:A1
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:aa:f7:88:45:57:78:76:29:5f:77:62:68:d9:ed:b1:0b:
d0:e4:9a:76:aa:b0:72:e1:3b:74:80:16:65:ec:fd:fd:6d:8e:
75:66:74:31:d0:a5:68:c6:ca:d8:53:15:a3:38:a1:b8:6a:0f:
d2:69:3d:12:24:51:f8:f1:50:7b:1b:90:c2:04:7e:5d:dc:ac:
e4:e0:53:9a:75:1e:1a:44:74:3f:c3:f2:d0:d7:86:b8:c2:e0:
b5:54:cc:4c:ad:2b:57:df:2e:37:6d:45:f8:16:8f:d9:8a:e9:
56:8e:6a:c5:75:8f:a3:42:20:17:85:9c:99:e6:12:0c:1a:30:
cd:73:88:17:20:58:77:04:55:34:4e:1c:c3:5a:8d:dc:67:59:
83:f9:0f:e6:e3:e4:65:42:9e:d4:08:8f:98:48:d9:0b:7f:36:
e8:06:96:47:6b:2b:bd:a8:31:0b:68:76:d0:07:bd:d0:6d:b2:
af:8c:21:22:62:13:f3:48:8c:90:f4:67:02:75:3c:7b:46:9a:
07:01:8b:41:27:78:2c:68:77:36:f5:0b:90:8a:94:4a:51:ab:
64:9b:ed:2d:4e:dc:dd:72:3c:fd:2e:32:f7:cf:a1:35:48:fa:
7b:9f:c4:95:22:a7:8a:4f:43:3a:df:2b:ff:b1:7d:c4:8c:b6:
b8:37:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:09:00 2025 by rpki-client