Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: /r3ktTLWuPUE/RX8KxWHFVJh9yc0uCPRkrt9t7GqKdU=
Subject key identifier: 2B:0A:51:98:02:40:76:27:92:4A:66:75:A5:24:B8:87:8D:9B:AC:2F
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0199356E8038B77CD6FFE7465BC3ABBB15C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 141C
Signing time: Wed 10 Sep 2025 21:00:58 +0000
Manifest this update: Wed 10 Sep 2025 21:00:58 +0000
Manifest next update: Thu 11 Sep 2025 21:00:58 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: fgkIdTULwuphyQYiYYdg5Q339ChVvrULDKpPtOOy7dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:80:38:b7:7c:d6:ff:e7:46:5b:c3:ab:bb:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Sep 10 21:00:58 2025 GMT
Not After : Sep 11 21:00:58 2025 GMT
Subject: CN=2b0a519802407627924a6675a524b8878d9bac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:79:40:5b:3d:8d:6d:65:c7:0b:48:d4:c7:
1a:54:7d:01:34:a0:c3:1c:51:f6:13:4d:05:c1:68:
e0:ff:fe:97:dd:8a:48:4e:a9:02:b5:73:2e:7b:74:
61:32:f8:30:a4:49:d6:e1:6c:42:3a:1e:f9:e7:bd:
36:bb:f6:b9:78:32:37:b9:3c:46:6f:c8:41:a2:33:
19:3f:00:a5:84:b5:b9:e0:39:44:d5:a5:d9:0a:c6:
6d:30:c0:09:5f:f0:3d:fa:d2:8d:80:15:2a:89:a9:
8b:1e:f4:c2:90:0c:1b:72:92:94:2f:d3:f8:b0:69:
15:d8:02:4c:b0:0a:a1:bc:73:c6:d0:c5:23:58:3c:
1a:f9:11:30:1f:1d:fa:1a:7a:d9:cc:29:b7:fd:cb:
3a:88:37:d9:64:ba:bb:1c:23:a0:a3:47:28:ae:53:
3a:cc:2b:bb:7c:0b:1d:25:69:8b:b1:be:0d:41:bb:
20:17:6f:36:c8:02:90:e3:2a:52:6d:c8:f5:c4:24:
00:65:1d:38:a0:08:38:a8:f6:d6:0d:20:11:c9:6c:
d0:fa:5c:42:12:0e:e6:e8:33:90:7a:39:ca:f5:60:
63:1f:af:ff:b8:f5:5d:a2:07:f1:8e:04:1b:d1:58:
e3:7f:65:3d:63:54:be:09:3c:3b:18:ac:ee:0c:d2:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:51:98:02:40:76:27:92:4A:66:75:A5:24:B8:87:8D:9B:AC:2F
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:bb:5b:1c:0b:a4:fb:ee:0b:9a:b0:14:df:39:0f:6a:8f:
41:12:1a:46:9a:31:c5:6d:cc:c5:7b:ee:89:78:9f:48:58:9f:
a5:ca:81:45:54:5d:ed:e5:e0:21:c9:ca:ba:f9:6e:c2:72:23:
f0:0e:4e:f4:71:e9:2a:3b:8a:4d:07:c0:f3:48:35:95:8e:0c:
b4:59:18:32:dd:b9:3e:13:09:d2:4e:0b:e7:8e:1a:15:29:3f:
ed:3c:e5:fa:32:da:6a:6a:70:96:35:79:e0:82:57:d6:d1:17:
0b:9b:5b:b8:f5:14:f4:60:50:eb:01:f8:c8:1e:36:c1:37:7e:
9e:2f:33:4a:c0:71:f2:c2:41:3b:fc:68:e8:44:b1:d9:f0:4a:
8f:2b:94:da:c7:e9:eb:07:af:46:79:f6:00:25:51:eb:aa:eb:
1a:a3:79:8c:08:57:e3:84:67:43:e1:03:ae:ff:59:48:33:ed:
02:1f:d9:49:f1:84:8b:6b:ae:d9:68:7e:be:a8:e1:cb:19:ea:
27:25:8e:c3:85:7d:86:f8:4f:5d:20:28:23:ad:85:d4:f4:51:
32:36:14:70:60:4f:18:e9:7b:03:d8:a3:2c:b6:97:8c:7a:6f:
07:a1:13:91:9e:90:95:b1:55:4f:e6:f0:13:90:23:da:a6:5c:
3a:18:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:50 2025 by rpki-client