Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: hM0C/FVnJUtklrasy0YbUAhutEC59yNBP1P/WD1RJRY=
Subject key identifier: 48:20:D0:07:FD:9C:E2:8D:E0:EE:80:E1:79:11:06:AB:61:14:70:EA
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 0199394BC9DC6501D94AF222A1411998902D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 15FE
Signing time: Thu 11 Sep 2025 15:01:32 +0000
Manifest this update: Thu 11 Sep 2025 15:01:32 +0000
Manifest next update: Fri 12 Sep 2025 15:01:32 +0000
Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: cP5pmKDclXl78YxN3LZva6aUEd4AKs99xRsLOB9ik8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:c9:dc:65:01:d9:4a:f2:22:a1:41:19:98:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Sep 11 15:01:32 2025 GMT
Not After : Sep 12 15:01:32 2025 GMT
Subject: CN=4820d007fd9ce28de0ee80e1791106ab611470ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:eb:45:5e:84:a7:a8:e2:f8:52:46:37:ce:
3b:cb:75:cd:70:c0:2f:db:6b:1f:0f:b3:8a:6d:44:
8f:25:46:80:61:9d:40:71:c8:a6:26:ec:b4:cb:63:
63:dc:e9:58:63:1f:c2:56:b4:55:9a:9f:d5:e9:11:
9d:bd:02:74:f2:93:91:a5:e5:ea:fa:93:0b:39:11:
8f:52:63:65:28:75:6c:b9:f5:b1:2b:0b:0b:a3:f9:
74:83:74:bc:af:26:76:37:f7:e7:5e:84:98:79:87:
0a:52:52:f9:97:31:a0:d6:e0:33:db:3a:b8:5c:78:
2c:a2:f2:73:2c:55:52:f9:a8:5a:32:3a:c7:c0:85:
2a:b8:c6:a3:7b:4d:1e:9d:57:5e:15:10:16:19:d5:
65:b6:1c:cc:33:a7:33:39:f7:1e:45:11:7a:9b:a2:
20:dc:4f:96:4d:9a:e8:9d:a6:4a:cc:ee:4a:44:e2:
e1:78:c1:46:bf:ea:f1:0b:61:8a:b0:c0:b0:3e:bf:
9c:2e:f5:d7:2c:5e:2d:e2:49:43:75:c9:5f:e6:73:
f9:31:a8:10:78:f8:68:8b:d8:78:da:e5:81:7e:d9:
e9:4f:8f:1f:9e:c3:22:ac:c5:e9:b6:9d:6f:0b:e2:
19:d2:7e:6a:5d:ec:7e:54:8c:d1:09:e0:6c:d2:25:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:D0:07:FD:9C:E2:8D:E0:EE:80:E1:79:11:06:AB:61:14:70:EA
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:dd:b5:c5:e1:85:5b:98:8f:7c:73:7f:66:97:8c:29:80:72:
00:65:e2:1d:37:18:36:e9:bd:87:ac:76:66:c8:45:b1:6b:3b:
46:de:e8:af:e3:41:a1:d2:a6:66:05:bb:42:94:62:06:f4:05:
86:8d:b5:ea:9a:f0:c1:e9:8b:a6:f2:73:30:dd:47:e3:0b:15:
ee:18:44:fa:72:87:b4:cc:2d:c2:a1:c7:49:36:88:91:0a:7d:
59:5b:77:73:02:41:45:24:61:2e:38:a8:8f:16:95:62:2a:4a:
dc:f0:f4:b1:59:fc:c3:da:0d:f4:3a:bb:64:46:54:7c:93:7f:
86:f2:90:04:48:2e:11:40:36:32:e3:2d:93:70:e0:ad:6e:74:
5f:dc:f1:6e:39:8d:3b:5f:9e:83:1e:3d:33:4e:b0:1e:f3:c6:
62:79:05:11:86:5a:34:00:21:2f:9d:a5:ad:8d:d2:63:4a:76:
9c:36:f8:e5:e2:6b:37:0f:31:1b:7a:52:1c:57:37:f8:02:67:
c6:37:68:82:af:c6:38:71:9a:b7:3b:76:3a:ec:b9:cb:dc:10:
42:a5:a2:34:2f:70:59:2e:99:c8:7e:8b:2d:88:5e:f3:0e:bd:
5b:17:e3:8f:28:07:d7:43:1b:25:d6:8c:10:34:88:8c:f1:2c:
e8:de:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:55:06 2025 by rpki-client