Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: XpwrB/WRUxYHr7f62Ce3VuSLdMmwT1VRXp7wCtGozUs=
Subject key identifier: 06:DB:26:C1:E4:90:86:FE:18:61:86:85:DF:D4:2A:1F:EE:C4:1E:0B
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019A0636304A6A82EEEEDC78336E754BF764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 10:00:05 +0000
Manifest this update: Tue 21 Oct 2025 10:00:05 +0000
Manifest next update: Wed 22 Oct 2025 10:00:05 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: tWNWlDtnzksqm+nLs9I2vJZc2IntqgR6b4dlQenDML0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:30:4a:6a:82:ee:ee:dc:78:33:6e:75:4b:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Oct 21 10:00:05 2025 GMT
Not After : Oct 22 10:00:05 2025 GMT
Subject: CN=06db26c1e49086fe18618685dfd42a1feec41e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:1a:91:67:79:59:0b:c8:4c:e3:03:c4:7b:
6a:60:3a:25:82:a3:04:1d:8f:66:10:6a:1e:a7:1f:
6a:14:01:57:e9:18:35:b6:c2:83:bd:00:a6:10:b7:
33:da:88:c2:36:76:63:a3:8a:f5:f8:41:5d:32:d6:
76:d0:d6:d9:d2:04:67:3a:12:c0:1f:d6:ef:a9:89:
db:8f:38:f2:70:b4:43:5e:08:a1:6c:67:a1:54:8b:
21:6b:34:09:c5:61:38:16:ca:c0:1f:2a:8a:ea:4b:
68:69:4a:cc:da:a9:b9:86:8c:ea:1a:40:d5:e3:00:
8e:4b:5a:09:7d:99:85:cb:03:96:29:10:dd:d6:a8:
50:06:2b:0a:34:ec:00:ce:0c:56:ce:be:79:96:f1:
06:2d:67:85:59:59:59:81:3e:72:fb:7b:ae:ea:fd:
f9:e7:67:8b:f8:c6:03:53:54:e3:8c:95:e4:48:93:
3a:b0:27:5a:96:2c:10:aa:30:b8:18:cb:fd:38:10:
ab:fc:94:6c:6c:12:0c:e3:d5:63:0f:7d:6a:63:dd:
f6:b8:f0:5c:8c:9f:4c:79:0a:ec:08:b5:02:cb:d1:
5f:6b:db:55:6b:b8:3d:1d:05:71:94:62:4e:ae:0d:
80:ce:26:63:b7:23:e0:7b:b5:f3:14:2a:3a:84:6a:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:26:C1:E4:90:86:FE:18:61:86:85:DF:D4:2A:1F:EE:C4:1E:0B
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:ae:b1:b4:5b:45:49:a8:b3:0e:8c:96:21:d2:14:1c:23:
d3:5a:89:ef:3e:f8:07:d7:1e:54:20:ae:96:70:1c:b7:85:31:
3e:02:e3:0c:c2:80:90:0f:f1:f8:50:d6:c7:fb:d0:8e:d6:b0:
51:18:b6:39:df:1d:1d:64:d5:8f:5a:56:e3:ab:f4:8d:e7:46:
8b:fb:26:01:d3:6a:36:84:63:5a:a9:b6:22:86:21:90:87:10:
4c:c7:50:76:84:a9:84:90:36:f9:46:2e:bd:63:ab:b4:0b:ce:
71:b8:52:2f:7b:f1:d4:68:c6:3e:44:89:14:42:85:25:df:14:
1e:36:8c:05:46:0c:16:2f:76:9a:3e:05:0d:12:57:3f:58:f6:
9b:f5:e0:50:75:57:93:0d:0f:aa:4d:76:05:a8:ec:be:b1:e4:
83:8b:57:24:1f:7b:cc:46:96:1c:cd:e5:82:45:79:c1:18:d2:
5f:e4:71:87:2e:f2:a9:84:04:ff:70:02:08:eb:1b:02:20:5e:
5c:e1:7f:be:5e:25:14:58:2a:fc:48:ef:87:28:33:43:fe:7c:
25:4f:66:84:b5:81:6b:4e:36:aa:4d:2b:ab:1f:8d:de:ae:fb:
e7:dc:97:53:9a:28:59:d8:08:13:f6:02:1d:a2:a0:8d:92:2d:
57:53:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:21:28 2025 by rpki-client