Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: J0bG6QEhdk4ItQTpVIUTBur2xRTzl6uEXxNU6glWYjk=
Subject key identifier: 55:04:7C:DC:14:B1:81:3E:79:12:B4:0F:6A:C8:65:E9:D3:8F:B9:56
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019930D4957994D6C11929273D5D5189784D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0C57
Signing time: Tue 09 Sep 2025 23:34:22 +0000
Manifest this update: Tue 09 Sep 2025 23:34:22 +0000
Manifest next update: Wed 10 Sep 2025 23:34:22 +0000
Files and hashes: 1: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
2: W3qS8ccHplCENHnAWCXalJ4Lxq8.roa (hash: h3ysUJyoiR9Pxj5SMBpAdJdk3U65tHclFMzHCEEhX4k=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=)
5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: Z95KL8Zgevxh2Nxs5s0orkKffdvpQkmRhhCz8h25+8U=)
7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=)
8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:d4:95:79:94:d6:c1:19:29:27:3d:5d:51:89:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Sep 9 23:34:22 2025 GMT
Not After : Sep 10 23:34:22 2025 GMT
Subject: CN=55047cdc14b1813e7912b40f6ac865e9d38fb956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:22:ea:9f:02:91:83:5b:9b:35:dc:b1:34:
4b:fe:93:3e:20:c7:54:59:9b:33:e7:38:e2:fe:ee:
9d:d5:94:9c:74:42:75:b4:ae:09:4f:0f:30:4b:17:
bf:a2:28:a1:99:3e:78:09:bc:5e:69:7c:ab:c6:90:
fd:f5:71:8c:04:e8:ac:b5:4b:2e:16:2a:95:5a:eb:
02:71:b5:bc:6d:d6:4a:7c:a0:cf:3a:07:11:57:cf:
99:3e:0d:1e:7c:c9:45:95:97:82:9b:d7:24:82:04:
67:87:f8:9f:00:68:6e:28:6b:79:6c:53:f5:34:a9:
cd:9d:3b:21:5d:d9:0f:d4:f2:44:4d:00:13:ff:a8:
ac:a4:1d:1a:52:02:1e:91:12:7d:16:c2:50:67:4c:
cd:1f:9b:32:32:d8:dd:80:37:8d:82:0b:87:c3:73:
1c:cc:0f:3e:13:0a:ff:83:53:92:b5:7d:b5:4b:d1:
e4:3a:96:2a:28:7f:e3:37:68:10:f3:9a:af:40:83:
53:9b:bc:89:52:85:71:b3:42:ef:9d:ce:0f:d0:d4:
8a:cf:b6:61:e1:8b:3f:32:b7:c1:42:d2:e8:92:c1:
22:a1:fa:5d:04:08:92:df:c3:48:cd:e6:cc:19:09:
d4:03:08:38:55:e8:5a:fc:95:1f:5d:bb:12:bf:e4:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:7C:DC:14:B1:81:3E:79:12:B4:0F:6A:C8:65:E9:D3:8F:B9:56
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:14:a1:e5:c0:35:cc:5d:7d:08:d7:af:87:f5:01:8a:5b:
ce:34:97:0d:19:4b:ce:25:15:6a:d6:0e:d7:92:71:7e:28:a3:
eb:99:ad:8f:65:6b:44:71:44:df:9c:d1:9b:03:22:63:d6:a1:
9c:29:c3:63:52:11:e6:bc:85:b0:bd:f0:1c:b9:13:ea:ab:49:
7c:8c:13:7e:a1:27:8c:97:36:68:a3:2c:da:54:f0:80:59:1b:
ec:b2:a3:24:fc:85:a7:17:ce:c8:05:e9:7c:78:d1:7b:d7:e6:
ba:16:ba:d9:eb:42:c7:4a:98:4b:10:7d:3b:dc:75:8a:36:eb:
d8:38:4e:10:7c:42:11:45:87:e4:a1:81:c3:0d:48:07:aa:f4:
cf:ed:0d:4e:28:ea:26:78:77:30:42:54:9f:66:7e:34:53:8d:
fe:1b:c3:8d:9c:3f:d6:58:9d:f9:48:88:34:a5:90:98:af:e0:
e8:2b:1e:16:d7:f9:8f:90:35:8a:ea:f5:6f:96:cf:5b:b3:03:
07:60:f3:2a:fe:a1:1d:92:e5:de:79:7f:df:1f:e8:58:17:67:
90:e2:6c:0e:e6:1e:0f:6c:5a:1d:35:5a:a6:4a:0c:19:72:98:
c7:4a:7c:74:a5:03:b8:51:2e:dd:58:3d:66:06:84:29:f4:aa:
93:f7:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:48:04 2025 by rpki-client