Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: jxgdPGKXMKnh7TohE29I5A3Fpj/Oo+hYizPElJv0y3c=
Subject key identifier: 59:5C:7F:90:1D:A2:9B:0D:28:D5:3A:05:C1:FD:74:76:91:5B:DD:60
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019A209C573B3B0E6EF00375FCD940CA4917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1689
Signing time: Sun 26 Oct 2025 13:01:48 +0000
Manifest this update: Sun 26 Oct 2025 13:01:48 +0000
Manifest next update: Mon 27 Oct 2025 13:01:48 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: F++BY1599aV5mnKFB8+DKa3iOAoWYcrd08eAf+hqhTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:57:3b:3b:0e:6e:f0:03:75:fc:d9:40:ca:49:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Oct 26 13:01:48 2025 GMT
Not After : Oct 27 13:01:48 2025 GMT
Subject: CN=595c7f901da29b0d28d53a05c1fd7476915bdd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:8c:71:44:d4:ed:f4:33:03:70:0a:a4:3b:
59:74:2b:bd:ab:e7:40:8b:5b:eb:b0:31:4c:d9:d6:
69:a5:4e:ea:12:83:e4:25:ca:70:3b:9d:fa:d7:06:
d6:cd:08:99:3b:98:21:4e:dc:a0:bd:98:88:c8:cf:
06:9a:b6:c1:f8:f4:5f:4f:df:36:7f:3d:d4:3d:a5:
f4:e7:70:4c:a6:c4:d3:49:b6:0d:19:90:25:04:2b:
6c:d5:61:de:0f:da:3c:39:fa:ab:46:75:e5:d2:dd:
ad:ae:b2:ef:c5:34:2a:25:cb:2c:40:49:e7:fd:32:
5f:a9:fa:8a:0a:fb:e2:74:9a:9b:bc:f9:32:33:13:
03:27:a1:ee:2f:14:3b:2b:92:c2:f9:ae:81:41:a8:
cc:76:fb:a4:3c:22:0a:02:ef:2a:ab:b4:de:e1:7c:
20:7c:37:32:82:70:8a:e2:45:52:bf:2b:b0:df:66:
4f:62:14:34:2f:9e:69:16:da:05:96:d8:5e:fc:a5:
ce:7d:16:b5:51:ef:d9:52:74:29:d0:47:81:ab:14:
13:89:64:05:8e:05:9f:5c:4f:72:e1:80:2a:72:8b:
9a:6c:71:d6:2c:00:c8:58:4e:b4:e1:2f:74:37:6b:
2b:74:49:85:10:1b:68:e2:10:55:5b:b4:64:82:31:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5C:7F:90:1D:A2:9B:0D:28:D5:3A:05:C1:FD:74:76:91:5B:DD:60
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:24:f1:31:77:04:b6:ee:f3:68:99:6c:24:31:02:d5:79:
d3:3a:a7:d3:48:a5:a0:94:08:64:f0:fa:a3:d6:4d:c7:4a:c8:
6a:13:27:2d:4c:b7:29:f3:79:83:d3:7f:f5:21:22:29:de:80:
30:dd:9d:61:c6:ab:16:2a:7a:59:86:a2:64:93:07:8f:f2:70:
63:20:df:00:f4:c1:60:9c:38:15:0c:12:05:1a:52:1f:02:17:
4f:a5:2a:4d:30:8b:7e:7b:0a:fb:3c:78:82:cb:b4:fd:a3:11:
c1:2e:44:da:59:5f:0e:5b:41:7d:22:6f:e0:e4:81:37:fe:be:
3d:1c:2a:06:2f:dd:c8:7f:e4:c4:d2:f8:d5:01:31:3d:a4:3b:
a0:47:b8:10:40:eb:f2:b1:77:5b:5e:35:b2:2d:0d:f2:b4:5f:
5d:e0:08:a4:a1:24:d5:00:5a:ca:a0:1e:7a:b3:f3:a1:0d:ce:
74:c4:9e:70:d8:ac:46:1a:bf:ec:0b:5f:26:fe:fd:31:23:95:
ec:a2:4c:43:b6:3b:82:3a:ff:78:55:4a:95:06:4e:93:ea:ee:
e8:e2:19:31:92:ff:89:a9:71:a1:16:91:c5:a3:57:05:16:16:
53:a0:99:5e:05:d9:a8:56:8b:45:0f:4e:ad:99:5a:88:77:7f:
25:14:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:47:37 2025 by rpki-client