Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: ThsDg+bMYpICzEQLsgrZBDnF+EYv10pEHxKzxnbRUac=
Subject key identifier: 8D:AF:37:D1:AD:53:75:45:71:F9:5F:08:19:92:F3:F2:22:CD:D0:CF
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 0199C3E9DC31758C60C66D7426EC1BC8576A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 03E1
Signing time: Wed 08 Oct 2025 13:01:47 +0000
Manifest this update: Wed 08 Oct 2025 13:01:47 +0000
Manifest next update: Thu 09 Oct 2025 13:01:47 +0000
Files and hashes: 1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=)
2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: zBMBOEoF9rrEniF1glJ86+QIGhP7UWEpJI142c3fDWY=)
5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:dc:31:75:8c:60:c6:6d:74:26:ec:1b:c8:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Oct 8 13:01:47 2025 GMT
Not After : Oct 9 13:01:47 2025 GMT
Subject: CN=8daf37d1ad53754571f95f081992f3f222cdd0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4f:53:a8:e6:a0:98:04:69:58:79:e4:29:21:
af:7e:27:79:f8:33:53:b7:d9:a0:6d:9c:b2:1c:35:
7c:8d:5e:66:06:f6:6a:37:db:45:46:c1:aa:d0:29:
fb:75:85:17:67:d6:a9:f0:9e:68:a9:b8:f6:e8:a0:
b2:fe:ee:b1:02:11:67:9d:ec:b6:79:bc:8b:22:6e:
47:c9:60:75:ea:3e:67:92:c7:41:0c:24:02:9e:0a:
1d:18:6f:3f:60:4d:2f:9f:f6:59:f5:64:9d:a8:0b:
36:06:e7:27:92:70:56:d9:37:8d:04:2a:7b:e3:b7:
96:5a:0b:ef:e1:be:aa:a3:08:f1:03:1a:43:3d:48:
d1:f7:f8:87:bf:0e:e4:3e:ff:ed:83:65:ac:00:2e:
90:0b:73:bf:b6:37:eb:7a:9b:c2:37:30:2d:f9:6b:
0e:24:cb:f1:21:4e:0e:73:af:a2:fd:68:3b:fe:a5:
d3:96:2c:b6:95:d8:e8:18:d9:c9:e3:93:d5:a2:02:
f7:d6:16:6f:cb:a0:2e:b8:12:ba:1f:82:4c:bd:45:
92:28:cc:5a:02:29:c9:d1:b6:83:e2:3b:f7:a7:2f:
28:49:63:d9:e3:a5:bf:f6:f0:4f:9d:77:27:8a:dc:
3a:7f:6b:eb:48:6e:99:54:8b:fe:a4:f9:6e:fc:42:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:37:D1:AD:53:75:45:71:F9:5F:08:19:92:F3:F2:22:CD:D0:CF
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:11:fb:52:72:d6:2c:2f:86:8f:a1:68:60:1e:bf:c8:73:
46:9e:88:a7:73:bf:18:30:d2:f3:66:0f:91:2f:73:1b:52:55:
6c:40:d3:f6:7f:96:fd:48:90:d2:f4:82:f8:18:f5:fb:f6:9b:
c7:75:44:07:8d:17:f8:28:99:55:87:d6:21:18:d9:1d:86:3b:
da:bf:51:60:2a:a8:1d:3c:41:e6:3e:8d:ec:32:f8:51:a6:3e:
3d:41:75:f5:3d:73:49:96:c8:d7:a1:ba:86:a2:75:84:99:50:
46:d0:2e:6d:af:e4:67:a2:58:a7:5c:7d:43:bb:e7:50:c6:af:
72:a8:d9:37:da:4f:a1:c2:cb:c0:c2:a7:1d:26:72:0d:63:6c:
29:2d:14:47:ab:c3:31:0e:07:c7:8c:d6:32:a8:94:11:73:5e:
c8:4c:9e:67:c4:00:af:c5:5d:4f:bc:0c:2a:e6:6b:25:3a:d1:
6d:db:bd:7b:85:77:42:67:3b:07:f2:1f:6c:9c:c4:4d:ea:5d:
e6:75:05:2e:78:b8:f1:cc:8a:85:93:a8:27:bb:90:cd:68:6d:
f0:55:37:b3:5f:b5:bd:60:ab:69:e3:60:e5:df:28:d5:3d:7d:
dd:e6:37:08:49:f0:ee:85:33:3c:6e:ce:e9:92:bd:d2:b2:1d:
7d:c4:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:28 2025 by rpki-client