Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: gX7OC8wuMyTyFe3z+dMYBpebiWuvgO1PcbUmC3XVH1A=
Subject key identifier: 72:2F:AF:D8:88:26:9F:6B:24:5E:AC:C2:A6:83:7E:B3:1C:D0:4B:B0
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019933EDD9A04D7BC8DB069D88326ED0E091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 155A
Signing time: Wed 10 Sep 2025 14:00:49 +0000
Manifest this update: Wed 10 Sep 2025 14:00:49 +0000
Manifest next update: Thu 11 Sep 2025 14:00:49 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: zuAZ6QvU6hxPhqjWEjk+IFtDVnZOeNHsMaoY8Dmkr3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:d9:a0:4d:7b:c8:db:06:9d:88:32:6e:d0:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Sep 10 14:00:49 2025 GMT
Not After : Sep 11 14:00:49 2025 GMT
Subject: CN=722fafd888269f6b245eacc2a6837eb31cd04bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:fb:d5:c2:78:03:23:f6:22:b9:95:6b:45:
74:93:9f:4d:3b:5d:87:6b:75:17:f0:c4:76:1c:e4:
0b:15:31:33:fb:f8:5d:51:9e:fc:d3:1f:92:76:c1:
8b:0f:90:c4:22:06:a0:4d:2b:ab:b4:a5:83:90:34:
de:77:84:5a:83:0d:05:ff:7d:43:c8:1c:ed:c6:04:
3d:1f:17:80:ec:cd:d3:35:95:f9:19:0f:38:97:81:
8d:30:57:d0:25:1b:6e:f5:a4:c9:37:dd:52:9b:f7:
22:82:0d:65:fd:4c:33:ed:f6:a9:12:8a:61:ee:40:
47:bc:59:ec:c5:05:3f:8c:a5:a1:cd:1d:e3:03:4d:
b0:82:9b:aa:e3:05:f3:10:40:2c:aa:57:2a:3c:91:
71:4d:2b:a7:b5:29:75:07:5f:3e:80:1e:67:96:4b:
e8:98:bf:7d:22:7b:7d:4e:e5:55:f7:4a:40:b3:06:
b0:b9:5a:ca:5d:27:a7:b1:36:9d:88:93:7f:74:49:
da:10:63:bb:f9:14:4b:2a:5c:e3:28:c2:c8:da:3e:
af:95:44:b6:d6:d6:f8:05:6f:56:79:be:f2:cf:58:
d9:00:23:d6:3f:5a:62:63:70:95:93:7c:db:57:4d:
0c:13:b8:5c:b0:4f:a6:4b:8a:2b:5e:93:e3:fa:e6:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:AF:D8:88:26:9F:6B:24:5E:AC:C2:A6:83:7E:B3:1C:D0:4B:B0
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:0d:16:a9:a3:3e:62:d8:bd:30:7d:88:36:e4:41:7d:ac:
98:7a:d3:3c:ff:f2:d7:58:6d:18:9a:b4:72:e4:e5:91:c6:d7:
92:b5:3b:4c:1b:52:9a:9e:23:34:35:30:e6:59:9c:59:b8:83:
89:ae:48:b1:2a:b9:44:85:c0:da:4f:d8:4f:a5:24:ae:2c:a2:
6d:c8:25:92:85:9f:30:96:c5:e6:44:e2:7d:60:dc:94:d5:79:
3a:73:74:6b:02:15:f6:22:94:40:32:6a:1d:f1:ae:be:ee:42:
ef:bb:9c:ea:96:63:f5:a5:6c:d6:c3:32:f8:57:a1:df:07:02:
17:72:df:6f:a6:41:d9:c3:c6:78:fb:8a:85:09:c9:bf:da:15:
1c:b3:ba:d9:77:d5:9a:df:3a:3e:02:59:3e:64:ff:73:02:97:
4b:67:2f:27:6d:02:18:52:f4:d5:3d:a1:be:ba:99:03:6a:95:
21:4e:13:0b:62:1d:87:5a:80:d4:f8:fc:30:ab:c6:66:cd:d5:
7b:0a:8c:ef:13:da:5b:c7:88:e7:a1:cc:a3:e7:61:9c:53:7f:
06:1b:ef:8b:8f:02:5f:70:8c:cc:4a:cf:56:01:21:85:18:6a:
57:b6:84:9a:80:67:f7:41:75:94:30:e0:77:68:c8:12:20:76:
8e:ae:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:32 2025 by rpki-client