Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: AhJIkBNt9F03Du+R8MWMVZhtxeQXjqsnc1lUugw0288=
Subject key identifier: 0C:00:4F:6A:42:5B:EF:55:73:84:7E:1C:0A:E5:DB:71:1B:F9:40:5F
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019A18E1A0B58A49231BAB7C9CD221042D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0CD0
Signing time: Sat 25 Oct 2025 01:00:31 +0000
Manifest this update: Sat 25 Oct 2025 01:00:31 +0000
Manifest next update: Sun 26 Oct 2025 01:00:31 +0000
Files and hashes: 1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=)
2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=)
5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: dMEY1h6+Gz7MUduGtaUMTkS4HTMa8tdUREjtr7Jm9ec=)
7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=)
8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e1:a0:b5:8a:49:23:1b:ab:7c:9c:d2:21:04:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Oct 25 01:00:31 2025 GMT
Not After : Oct 26 01:00:31 2025 GMT
Subject: CN=0c004f6a425bef5573847e1c0ae5db711bf9405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:00:df:e3:26:5b:2d:09:21:14:42:b4:9c:
5c:04:b3:d4:a6:8e:7a:7d:09:25:70:44:b7:02:4b:
2e:ac:45:e8:d2:a0:50:dd:fc:65:ba:d8:2f:0b:7f:
04:52:c5:0a:38:48:b0:c2:76:47:5d:c1:75:32:eb:
4d:85:2c:dd:67:a0:4c:2b:4d:5a:b2:8c:4e:af:55:
02:5b:23:62:ca:cd:cd:be:fc:db:46:a8:72:5e:f0:
d0:9d:6a:78:a8:b0:cb:16:3f:8b:04:a0:f1:90:d5:
f5:fd:36:ba:bb:f7:2d:13:e5:48:7d:f5:67:74:16:
db:95:13:a4:88:0a:c1:13:b0:5b:5e:41:ba:1a:f4:
d4:07:2d:05:a1:9b:c5:8d:61:69:b2:32:d1:cc:08:
09:e1:3a:53:26:50:48:52:95:8f:b3:e9:1d:66:e7:
6c:09:b6:bb:84:bf:59:02:7a:46:11:4f:91:0b:9a:
c7:a3:94:ff:f3:64:18:3b:1c:49:fe:ac:1b:e5:70:
ea:c4:93:dd:7c:a0:d0:de:15:6e:b8:8c:22:88:f7:
55:60:0c:f9:56:d9:a5:15:c6:98:3a:9b:3f:8a:d9:
32:3d:6e:09:ca:9e:67:3e:7c:86:df:6f:d8:6f:4c:
72:26:c0:5e:f4:ee:62:e5:7a:07:ff:5d:a3:b9:ca:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:4F:6A:42:5B:EF:55:73:84:7E:1C:0A:E5:DB:71:1B:F9:40:5F
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:40:3e:6d:a3:be:1c:28:ab:60:ce:f7:2c:7c:84:68:3e:a6:
32:5c:8c:2d:ac:56:87:9f:43:e0:99:d6:ad:d4:b2:c1:fd:f6:
7a:72:25:26:95:e3:03:96:fb:79:b4:16:6d:6b:ff:7f:88:01:
c8:5c:91:ca:e2:bb:3b:74:49:2f:f4:16:a0:dd:79:f8:c9:95:
5b:95:e2:f2:d9:01:63:70:e6:c6:8d:8e:b2:98:3b:93:0b:9b:
30:b3:b2:fd:9e:4b:28:25:3e:1e:0c:59:51:db:c2:db:5c:50:
82:aa:3a:48:d9:18:39:a0:15:c8:85:7d:67:ae:f5:5d:49:b5:
31:1a:33:d2:63:6c:82:d0:7c:5b:74:cf:4b:b0:f6:81:cd:b5:
89:f9:2a:1d:b7:c1:95:bf:35:e4:d1:7f:bb:c8:50:8a:08:43:
05:f5:9e:5e:9e:09:97:71:37:60:a5:2e:84:9b:2b:0a:ab:54:
5e:e6:2f:ea:51:10:c7:32:21:9e:0c:b7:bb:cf:2c:1b:e6:9d:
6e:26:8b:6a:1d:c2:69:af:f9:01:51:d6:50:fd:7e:06:ec:f0:
31:79:f6:9b:ed:03:91:dc:5f:f4:1c:a9:0c:e9:db:21:82:3e:
99:80:e1:88:26:42:76:5f:d2:49:ec:b4:fd:31:b6:b8:9f:d1:
17:d6:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:57:59 2025 by rpki-client