Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: u9f/qyXfLk+v6E61WZX8eFJTzoKckThisozBFsQV3zo=
Subject key identifier: E5:E2:3F:AB:A0:58:A9:09:65:EE:D4:7A:81:94:74:47:85:43:2B:2B
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019A0748DBC6A4E57C4C1BA7834EE9D5731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 16F3
Signing time: Tue 21 Oct 2025 15:00:06 +0000
Manifest this update: Tue 21 Oct 2025 15:00:06 +0000
Manifest next update: Wed 22 Oct 2025 15:00:06 +0000
Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=)
3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
4: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: zabAqNL+g6l0FS9qKdpH2jWz5Hs18Gnhr0iarSIfj3Y=)
5: pczhsUKGHELIQkg7tKT9igyRi-A.roa (hash: Y7SOjOUl6Opwe6kgzkQEfHKGoUu9pf1pYRSzuMhv1S4=)
6: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:48:db:c6:a4:e5:7c:4c:1b:a7:83:4e:e9:d5:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Oct 21 15:00:06 2025 GMT
Not After : Oct 22 15:00:06 2025 GMT
Subject: CN=e5e23faba058a90965eed47a8194744785432b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:e5:10:3e:99:ba:c1:a5:44:c8:81:89:9d:
5f:16:31:09:f2:6e:7e:ee:85:10:0a:7b:b5:eb:7c:
cf:e1:71:e7:47:31:8f:22:b0:5d:02:20:29:f7:5a:
ee:a3:31:9c:f4:80:40:23:23:ee:7c:78:8e:30:5a:
40:65:52:b5:2a:3a:85:63:4d:96:5d:8d:6b:98:c7:
03:0d:d9:e5:93:20:aa:66:95:91:45:3d:fd:71:93:
52:39:f3:40:1c:b5:79:27:99:4f:2b:c4:67:ef:b9:
e3:62:57:a5:a6:10:3f:61:ed:54:3a:61:87:05:db:
f0:8c:3c:e5:6c:5d:9d:60:1f:26:ff:87:4c:a7:b9:
8a:ef:69:d8:cd:80:85:9b:91:73:f0:59:9b:f0:b2:
e5:25:33:b0:3e:9a:0f:d6:4c:fe:27:63:b7:34:34:
4f:bc:c2:19:62:7a:94:66:d2:aa:95:b2:fc:6d:2c:
8c:d3:0d:52:b2:a3:ee:c1:ef:bc:c9:af:e7:9c:46:
de:d6:a4:d6:83:af:eb:7b:9e:c9:3d:ce:f8:bf:37:
35:2c:f7:2e:24:1b:2d:57:35:5a:62:a0:bb:ad:18:
00:a3:f0:b8:77:ab:af:a5:dc:63:0e:9b:3d:27:80:
24:81:6a:61:f9:35:d2:3d:72:94:ba:6a:c5:fc:b0:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:3F:AB:A0:58:A9:09:65:EE:D4:7A:81:94:74:47:85:43:2B:2B
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:13:31:ae:f6:37:53:6e:da:50:54:49:6c:6e:ee:2a:0d:
87:37:1d:19:4b:c6:76:bc:a5:da:3b:4b:2e:e4:b6:4b:56:53:
c2:90:92:fd:55:4a:4b:16:56:49:af:68:03:34:44:0e:ed:71:
a4:ac:7e:b5:68:82:c8:ef:6b:df:9b:33:7a:6e:d9:00:8f:b7:
f3:1b:2a:6a:fe:bc:9a:e5:63:cf:0b:19:db:1c:82:ec:51:05:
58:3a:e4:0f:2c:72:26:45:e9:81:c2:ce:34:47:f2:5d:b6:ee:
64:92:8a:15:59:d1:42:a5:b6:48:40:57:94:9b:df:4d:86:28:
d8:c3:79:fb:f0:f5:c8:49:d4:1b:5d:d8:ce:8d:de:40:1b:b0:
68:2e:ba:f7:9f:a7:84:2d:3b:c6:e7:c3:77:36:6a:67:df:94:
27:11:65:f6:1e:72:30:e0:c7:3b:cd:bf:76:2b:34:8c:cb:f6:
5c:be:bb:2b:16:6f:a2:69:ae:a7:90:d1:d5:f1:37:6a:84:b5:
c3:fc:2e:cc:21:5e:3a:be:8d:a4:6b:f8:4a:5d:67:ea:c1:37:
c2:95:f3:21:9c:84:0a:b5:0b:4a:b4:1c:12:c6:4f:6a:c0:01:
59:a5:e7:c8:3e:40:47:90:1d:e6:8c:c8:27:33:35:4f:d8:ef:
8c:25:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:39:11 2025 by rpki-client