Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: WV14daPbqmrXfJ99hjbYAZr+KtHIjCoSg1KK+xKPU/E=
Subject key identifier: E1:D7:92:3A:A0:A5:AD:3F:BE:D1:9D:37:48:30:F8:0B:AB:B7:62:76
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019A2109280C8972BE8DFF6554F7EEB6EC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 02AD
Signing time: Sun 26 Oct 2025 15:00:39 +0000
Manifest this update: Sun 26 Oct 2025 15:00:39 +0000
Manifest next update: Mon 27 Oct 2025 15:00:39 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: +OhpFWYUnFTkmtd62WjONicU9UzlG5e1CAdcfOQKADM=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:28:0c:89:72:be:8d:ff:65:54:f7:ee:b6:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Oct 26 15:00:39 2025 GMT
Not After : Oct 27 15:00:39 2025 GMT
Subject: CN=e1d7923aa0a5ad3fbed19d374830f80babb76276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:13:cc:8b:4a:ae:eb:c2:ac:90:c8:3f:98:
ad:36:57:d3:be:10:7b:12:a5:c0:3e:45:ad:3a:f3:
2f:ae:a9:a8:74:20:4d:b0:6c:fc:94:28:dd:ec:7e:
4c:5c:ee:0e:f3:27:e6:ff:06:26:b3:76:70:8b:03:
e3:bc:00:26:a2:a1:ad:3c:08:e2:10:df:e7:25:1c:
82:7c:f5:a3:61:c0:57:a2:6a:d1:52:0a:9d:de:3b:
77:d6:33:d3:b2:14:b9:08:e9:03:df:45:46:85:07:
14:db:2f:26:55:c2:00:f0:df:25:1c:7f:5d:cf:80:
d8:da:60:77:68:41:1c:65:d5:03:2a:dd:89:da:85:
bc:d5:dd:df:c8:d7:54:1c:4d:98:6f:0d:40:ff:c8:
9a:b8:49:12:14:bc:5c:44:6b:5e:df:51:63:d3:51:
75:c1:ab:4e:ca:42:73:3e:a7:08:ba:20:98:ce:14:
59:03:4c:b4:7f:45:f3:3d:fa:90:22:11:0e:c0:61:
4c:9f:a1:d0:86:1a:09:d8:2f:fe:8c:ef:c7:0e:bb:
a6:e8:e0:32:06:75:28:22:bb:ec:72:6e:25:f8:64:
33:85:2b:7d:62:c8:0b:ae:d2:5a:83:70:a5:b9:33:
e2:8a:7c:ca:f9:c5:47:aa:78:fc:68:12:1b:ed:4c:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:92:3A:A0:A5:AD:3F:BE:D1:9D:37:48:30:F8:0B:AB:B7:62:76
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:54:99:37:5a:89:c9:ba:5e:02:f6:b6:b4:f0:1b:8d:46:
a9:7f:9f:d5:26:88:d9:e2:aa:47:e6:66:5d:f5:f0:20:4c:5d:
fd:67:d6:0b:2d:93:2e:c2:cf:ca:4c:32:b2:71:72:74:c1:11:
4e:e9:70:53:58:b5:00:80:1a:23:0c:0d:bb:eb:e1:b3:b6:ca:
90:ac:38:7d:fb:8d:d2:90:ae:e1:6d:64:09:db:de:3d:8f:54:
05:0e:cf:f1:df:a8:29:a3:7c:2b:51:8b:b6:b4:52:aa:8b:96:
73:bd:98:f7:df:70:39:2f:96:23:88:86:dd:57:47:ca:e2:ff:
84:a2:e0:23:47:77:cd:29:4e:4c:ad:90:08:d8:8a:df:06:75:
d1:06:e2:80:25:b9:c8:e6:de:d2:d5:ec:e3:3d:60:c4:50:9e:
6f:85:df:60:45:6e:bc:15:74:1b:9c:b2:78:b9:54:d9:bb:ca:
26:d5:c4:4b:79:d3:c8:50:53:6a:d5:da:58:ca:d1:27:33:f1:
78:93:90:4e:c6:42:00:8d:69:75:05:b1:10:e0:c8:54:5a:9f:
a4:7b:c3:8b:d5:91:a1:13:c8:4a:fc:b6:91:aa:b0:58:1a:99:
d3:c7:1e:80:96:51:ec:d3:9b:4b:3c:68:90:80:c0:37:86:eb:
28:51:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:49:53 2025 by rpki-client