Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: S8zwtyF+HfdWhNOk2UrlDjpHT95xlQDcWRTLUYFKjNY=
Subject key identifier: 96:96:3B:9F:22:E9:DB:DC:9E:95:D8:9B:88:A3:42:BB:B7:5F:B9:85
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019A1E08227580533FDDB97D7EE96FEA84D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 1701
Signing time: Sun 26 Oct 2025 01:00:40 +0000
Manifest this update: Sun 26 Oct 2025 01:00:40 +0000
Manifest next update: Mon 27 Oct 2025 01:00:40 +0000
Files and hashes: 1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
2: JBF4nmB_9dA41I4-h-2ocy7VHRY.roa (hash: TnEvzmeVW0oV1dW+VOZZ6uxDCsLJLLDwXJNqVjj4CQA=)
3: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
4: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
5: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
6: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: i+QBSixYmzIxyXbNH5CLPNxzFv5Sbi1xngJQMMVYRq4=)
8: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:22:75:80:53:3f:dd:b9:7d:7e:e9:6f:ea:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Oct 26 01:00:40 2025 GMT
Not After : Oct 27 01:00:40 2025 GMT
Subject: CN=96963b9f22e9dbdc9e95d89b88a342bbb75fb985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:37:58:3a:f4:12:76:db:60:db:e8:ab:0f:
1c:c2:dd:79:ac:08:8f:d6:87:aa:1c:3c:b8:ea:d2:
db:58:02:b9:6f:86:75:df:00:8a:ba:08:e2:3f:e2:
61:84:73:84:c4:3e:e8:9d:18:b6:51:fe:f9:6d:88:
36:15:70:3a:60:0e:c4:e5:d3:e3:96:13:dd:04:9d:
88:64:42:56:5d:34:42:42:78:8a:bb:b5:47:f9:10:
68:a4:bf:6b:88:7a:54:ec:2a:c1:ef:0d:33:3c:8d:
fa:16:42:c8:17:1d:5d:4e:30:42:b0:0e:f2:25:ae:
7c:6b:51:9d:99:23:a5:dc:42:0f:26:c6:a5:61:cf:
dc:da:f4:ca:23:67:d8:03:6c:f0:88:6b:51:f3:0f:
2b:65:78:ef:73:5f:90:86:89:94:ef:85:e7:31:38:
fc:52:d9:af:40:51:fd:e0:bc:a0:c9:e9:f6:98:e4:
bd:d4:4a:a4:7b:90:67:7d:48:e8:d4:22:3f:8b:6d:
db:57:0c:f3:3b:aa:e4:d3:fc:a7:f6:81:d3:77:24:
82:8b:60:c6:0e:70:0e:39:8f:00:c0:d3:81:06:b3:
02:f0:5b:a6:1f:36:69:f7:34:86:11:1f:e3:0f:17:
31:12:4d:98:cb:76:be:77:d3:cb:15:06:7d:5b:67:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:96:3B:9F:22:E9:DB:DC:9E:95:D8:9B:88:A3:42:BB:B7:5F:B9:85
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:4b:51:f8:b0:4a:97:38:d5:7a:f4:48:c7:49:07:6f:ca:
21:50:55:04:e2:b7:d1:3c:a7:69:e7:46:f8:c6:20:3b:2d:22:
c2:4e:d0:c7:ef:eb:ea:0b:07:5d:b0:f6:38:4a:99:2e:48:4f:
da:b4:ea:41:04:ec:b5:e1:10:9e:17:4c:56:d1:86:82:47:0f:
1e:0b:8f:af:1b:4b:fa:41:54:42:9f:a0:4c:e4:30:2a:21:94:
35:a5:34:8a:d4:ae:81:f3:4b:99:f7:f9:02:b4:34:6a:2d:5c:
c3:59:90:8b:21:29:83:d8:da:4b:3b:d8:c6:8f:b2:65:88:3e:
73:50:e9:8d:ae:d7:53:95:85:4f:16:6a:f3:a5:dc:0a:13:81:
ac:57:fd:62:77:81:63:bf:09:03:21:02:d6:e2:60:ac:42:c5:
ea:49:64:d9:18:db:ed:23:75:66:10:29:10:21:c1:62:12:20:
95:34:3a:d2:d4:56:be:fe:fe:f8:ca:d6:0b:1e:f8:fd:5b:e8:
a2:b7:24:5c:2e:ea:a0:7e:14:76:a0:2f:1d:7b:82:a6:9c:21:
d3:34:ef:69:e7:1b:67:50:5c:c4:07:6d:f6:af:f3:c8:ab:96:
06:10:51:2b:ae:5c:ee:63:a5:cb:81:7f:1b:ab:12:34:26:8a:
ba:22:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:09 2025 by rpki-client