Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: x8PyewVTv3YzWH60GW2OpFTbakhY2kd1tqRlzM30Jx8=
Subject key identifier: 3C:7A:52:7B:6C:D1:34:B6:DA:8E:6A:A3:C2:E3:EA:FC:AB:4F:67:A5
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 019A22F73D3F261A681ABDB175F5307846A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 123A
Signing time: Mon 27 Oct 2025 00:00:19 +0000
Manifest this update: Mon 27 Oct 2025 00:00:19 +0000
Manifest next update: Tue 28 Oct 2025 00:00:19 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: e13R642OdSrQDKSB4guJliM+BGh0rzirlQuL0tdwVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3d:3f:26:1a:68:1a:bd:b1:75:f5:30:78:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Oct 27 00:00:19 2025 GMT
Not After : Oct 28 00:00:19 2025 GMT
Subject: CN=3c7a527b6cd134b6da8e6aa3c2e3eafcab4f67a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:20:0e:22:f3:bc:b9:7d:b1:ac:87:e6:6f:
82:48:1d:0a:c6:62:83:0c:a7:0f:0f:a2:4f:46:da:
16:9e:7c:25:35:4d:42:56:d5:d5:3b:a2:36:b7:62:
ed:65:bc:80:61:8e:2e:dc:4d:25:d8:18:a4:74:7e:
11:d9:97:2f:de:36:6c:28:e2:7e:f4:9f:0d:08:34:
b8:2d:67:a3:74:3d:47:18:9f:ce:5c:c2:cd:ee:08:
1b:df:4b:53:55:d2:56:b6:c1:cb:10:e1:43:5e:e0:
9f:7f:39:d9:8b:46:fc:3d:86:7a:51:6e:a0:da:7e:
51:50:22:c6:4c:3d:66:9d:19:ad:49:99:5e:02:c2:
e8:e6:e5:27:c5:59:28:9c:41:75:29:16:58:37:71:
9c:db:39:34:17:11:3e:1b:22:1c:1e:85:f1:a8:e9:
49:66:38:f8:a7:83:03:28:52:c6:b3:e4:8b:98:d3:
cc:45:fc:4c:b1:1f:8b:db:0c:47:36:95:29:9e:b9:
f3:6a:0b:78:92:5c:d0:17:78:b6:7e:95:a0:d4:f6:
99:b4:f1:23:ed:41:18:e6:82:8c:53:3b:d1:43:25:
74:96:05:50:39:81:27:34:11:a5:e3:5f:77:20:54:
dd:d6:bf:4a:ab:69:42:07:be:32:f0:8e:da:71:e5:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:52:7B:6C:D1:34:B6:DA:8E:6A:A3:C2:E3:EA:FC:AB:4F:67:A5
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ae:4a:4c:db:8e:df:c5:cc:a4:34:91:3d:02:92:e1:b2:0b:
6e:50:a8:da:43:31:b8:59:e0:97:22:56:f8:8e:87:4f:38:5e:
02:b5:b8:d7:ac:84:93:64:7f:a7:5b:f2:fc:9e:5a:75:a3:83:
d5:77:69:d7:3b:59:49:00:a3:fd:73:14:61:da:54:27:be:f4:
51:4a:02:ac:46:15:a5:94:2c:b9:ed:eb:13:7c:ba:cd:aa:9d:
9a:97:f5:54:df:1a:fb:fa:37:7a:9d:9a:58:d7:39:7e:0f:43:
3c:c8:c7:ef:40:49:81:2e:eb:ba:89:f3:e0:ce:83:8a:20:ee:
2b:6a:9f:b0:fd:1c:db:df:ea:30:6e:a9:88:09:72:41:00:0a:
6b:66:c6:c8:6e:6e:33:59:66:3b:1a:bd:b3:ed:01:67:48:cb:
b8:32:3a:09:f7:5a:10:f6:14:a2:04:ef:5c:c1:ad:d3:4e:83:
63:f5:29:22:99:71:f1:f5:70:40:58:46:01:98:ba:a2:bb:91:
d4:fc:b6:1e:3e:67:a0:ca:75:35:fd:b4:ba:7b:f7:c5:4f:d9:
92:18:19:67:49:c9:1a:93:25:71:08:57:ef:95:8a:d9:cc:60:
c3:c0:d1:66:c6:19:07:ac:15:af:93:14:5d:f5:c4:3b:f2:3c:
d7:71:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:26:30 2025 by rpki-client