Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: ++7fSTA63+eefcRBArWF/our25Mq0DgVYSQcdfqXp5E=
Subject key identifier: 62:98:96:CF:BA:22:88:0C:BF:2B:39:E5:BA:90:65:46:EA:46:8D:2A
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019A24E5B7F2289F74FCE45535C706E2C7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1687
Signing time: Mon 27 Oct 2025 09:00:25 +0000
Manifest this update: Mon 27 Oct 2025 09:00:25 +0000
Manifest next update: Tue 28 Oct 2025 09:00:25 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: gRn5bGLLtmoEUp7Rx1mde4BGNPq2grIW0vUZxPRfnsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:b7:f2:28:9f:74:fc:e4:55:35:c7:06:e2:c7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Oct 27 09:00:25 2025 GMT
Not After : Oct 28 09:00:25 2025 GMT
Subject: CN=629896cfba22880cbf2b39e5ba906546ea468d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:f5:4f:02:3d:88:7d:6c:7b:f3:86:01:91:
4e:11:af:08:44:ce:fc:1f:ef:81:67:18:14:7a:ed:
be:b7:a2:75:1e:b6:0d:1c:4d:78:09:02:fe:33:95:
21:00:13:6f:52:1c:3c:23:b2:ef:24:21:4c:60:e6:
38:88:c5:c4:82:ca:cf:b6:35:f6:b4:5f:e8:a6:ad:
c8:96:93:11:b1:bb:cb:ed:7d:12:46:e4:99:2e:39:
b1:c0:0c:12:e3:64:5f:cb:53:03:9a:a1:66:c0:25:
91:5a:25:ae:f3:05:34:3e:55:15:a8:4c:9b:c9:f8:
c8:c5:0a:89:d1:e4:0c:52:59:7f:c2:f2:df:34:69:
fb:ff:52:d7:57:5f:d1:52:f5:48:09:a0:7b:08:ac:
f8:4b:65:57:dd:db:17:b8:1c:77:4d:3c:2c:70:81:
16:5b:c7:95:a7:72:20:32:85:e4:91:98:cb:a4:ed:
c7:a8:3c:fd:18:70:45:74:43:23:bb:df:97:93:e9:
40:7b:1c:af:3b:5e:f9:32:cf:15:97:3c:dd:9c:cf:
d5:08:e3:08:bf:4b:ee:1e:dc:4e:0e:20:39:e6:c0:
f8:38:13:5e:9f:3b:54:af:e6:00:a0:1b:4a:8b:bd:
4f:08:58:98:30:46:6b:8f:8b:98:d9:8d:c6:d7:dc:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:96:CF:BA:22:88:0C:BF:2B:39:E5:BA:90:65:46:EA:46:8D:2A
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:cf:43:df:72:35:3f:3b:4d:24:2b:35:73:d0:71:cb:62:
bb:5e:58:cc:db:85:07:fe:34:04:74:bc:8a:e2:fe:79:01:a0:
97:39:f1:22:ea:37:a4:8c:aa:22:8a:94:29:15:ec:14:7f:78:
08:a3:20:8e:cc:bd:ba:45:36:af:67:cd:fb:bf:f5:d0:3a:0c:
6e:20:97:1f:42:a7:bd:18:b7:43:25:7d:1c:cb:08:0b:14:09:
29:c8:eb:6b:91:d3:65:c8:be:28:25:3a:97:70:3c:0d:c2:12:
ad:09:65:a2:b4:f6:5a:df:a8:be:74:e2:d3:c1:79:22:c7:5f:
9c:59:06:b5:ad:45:55:07:9e:5b:f1:df:82:9a:10:49:da:23:
81:6e:a9:ec:12:c8:ce:f4:5f:cd:7d:1f:fc:8a:43:0b:0f:a6:
4f:2d:a6:f6:da:1d:0b:db:12:dc:72:e3:f4:1e:cd:e2:18:dd:
d3:23:23:fc:d8:c9:54:bd:e3:fe:a9:8b:0f:ce:14:02:84:e9:
47:f6:a4:c5:95:a6:86:a2:6c:d5:a5:7c:cf:08:26:4c:56:45:
d3:85:85:9e:56:8a:da:c3:f5:37:bb:0b:f2:34:37:7f:cf:09:
90:09:44:0b:d7:e6:26:fd:0c:3a:03:5a:a3:dc:aa:26:de:a8:
79:8d:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:05 2025 by rpki-client