Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: OmC7LVSNTb6eBCYDetMz3tQ63QyvivFlHWaAu+02pgk=
Subject key identifier: F4:51:76:FE:7B:45:AC:81:2A:C8:13:6E:31:D7:6F:8B:3C:D4:C1:2E
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 019A2176F2F6700517F1207A1105CAD98210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 15D5
Signing time: Sun 26 Oct 2025 17:00:34 +0000
Manifest this update: Sun 26 Oct 2025 17:00:34 +0000
Manifest next update: Mon 27 Oct 2025 17:00:34 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: GqK4eCYbWOa3a8vs7eX0Jej4abcDiYrJbSD0UiESUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:f2:f6:70:05:17:f1:20:7a:11:05:ca:d9:82:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Oct 26 17:00:34 2025 GMT
Not After : Oct 27 17:00:34 2025 GMT
Subject: CN=f45176fe7b45ac812ac8136e31d76f8b3cd4c12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:74:2d:3e:c2:ac:68:fd:36:9e:15:81:83:d8:
7d:c5:ef:01:27:aa:ed:3f:54:c1:4f:6f:e7:dd:36:
1f:0e:68:05:cc:24:0e:14:5e:f8:41:ad:46:ef:44:
73:55:c2:fa:ce:c0:09:b8:06:b0:0c:2f:a9:c1:0d:
f0:e1:b5:32:ff:6e:77:c7:02:91:20:fa:61:e5:0d:
70:c7:a2:90:88:ea:42:ef:88:cc:93:45:76:45:4f:
13:7d:ae:a5:bf:6d:c7:32:83:2a:e4:21:58:3f:4d:
58:fc:c0:49:53:a9:d6:3b:89:62:38:14:28:c5:91:
70:8a:4d:73:9d:82:91:b3:6c:a4:38:65:02:86:63:
57:57:f1:7f:17:14:eb:ea:b5:4b:b8:d8:8a:d9:68:
ac:e6:7b:ef:b3:e9:c0:96:bb:2f:4c:ae:74:5e:ec:
b5:68:ac:cb:76:95:f8:cf:53:ec:5e:d4:3b:26:b6:
51:7e:52:47:54:e0:61:c4:5c:7a:b9:8a:b5:e7:20:
f2:76:5c:8a:09:e5:5e:ea:d1:72:7e:0c:aa:42:84:
46:4c:9d:d6:e8:ee:84:a1:0f:90:17:05:78:57:df:
32:c0:8d:03:bc:ad:a1:e1:0d:88:95:9b:52:56:4d:
df:5b:a8:cf:84:f6:2e:0b:70:ff:a3:08:8c:c3:03:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:76:FE:7B:45:AC:81:2A:C8:13:6E:31:D7:6F:8B:3C:D4:C1:2E
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1d:bf:a8:d0:25:23:72:d2:53:2e:69:ba:a3:36:1f:34:05:
58:e0:e3:fa:55:37:f1:c5:e8:25:92:71:e8:0c:cc:1b:b8:d5:
30:0b:75:d8:21:b5:a2:82:0c:cc:36:9b:88:ff:60:2b:d6:0d:
05:0b:88:6b:20:81:c1:14:3a:34:58:18:62:28:8a:4e:f7:eb:
29:2b:45:29:69:68:d0:65:12:b3:75:eb:ae:20:41:c9:1d:d0:
ec:36:2a:c2:3a:3c:16:dc:32:ae:17:9b:cc:bf:62:3f:44:e9:
b8:1c:b2:b9:7b:b7:47:a9:06:37:ee:f9:59:38:53:3c:e2:b6:
a3:2e:0a:49:fc:84:af:d7:f4:4f:69:8b:ba:ad:5d:22:81:32:
9b:ad:06:86:e1:4e:72:dc:e3:21:9d:a2:3c:25:08:a9:57:34:
03:bc:70:43:1b:c8:50:d7:87:2c:e9:08:19:4d:dd:af:1b:81:
9c:76:03:ee:99:74:42:03:13:97:2c:6a:1c:52:a1:08:9f:c9:
e3:18:65:7b:e1:44:2c:16:8d:32:f7:41:60:fb:79:56:e5:61:
e7:e9:5b:99:0a:89:26:6b:10:c0:84:49:af:57:c6:67:18:24:
9c:e3:54:72:5f:de:38:ae:82:e7:17:df:8b:3c:de:dc:c8:d4:
27:a2:9e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:32 2025 by rpki-client