Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: NwCyG4xb8CXHTZg4Y17Lvk/qWXZStTB59evcO9iUhNE=
Subject key identifier: 9A:FE:EC:2A:F6:7E:50:8E:B5:AF:A2:77:A0:A3:D1:7E:F1:8C:DA:F8
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019A24AF10E33B6FD7357230F7C67F7169C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 08:00:44 +0000
Manifest this update: Mon 27 Oct 2025 08:00:44 +0000
Manifest next update: Tue 28 Oct 2025 08:00:44 +0000
Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=)
2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: xafYXiNmzih37pwtfUxERQO0xoNRFsv3zdFUSlfqtuM=)
4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:10:e3:3b:6f:d7:35:72:30:f7:c6:7f:71:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Oct 27 08:00:44 2025 GMT
Not After : Oct 28 08:00:44 2025 GMT
Subject: CN=9afeec2af67e508eb5afa277a0a3d17ef18cdaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:78:6f:50:36:2f:6c:8d:e5:56:8a:b6:a0:
bc:ce:87:21:5c:e2:97:e0:e4:b5:c8:12:7b:41:b1:
cd:50:6c:c7:e5:be:d4:fc:c9:31:06:75:d1:5a:32:
32:bb:b1:5d:07:94:71:3d:05:42:6b:aa:b1:bb:bf:
e3:96:f8:fb:15:10:17:dc:13:f3:08:da:88:98:f5:
7f:7d:d3:fb:b5:2e:ad:b4:e2:4d:d0:0c:80:2e:a2:
fc:aa:fc:69:0b:88:1c:36:41:b5:b6:34:44:78:36:
f6:e6:a2:d6:cb:49:fe:47:ca:bc:85:c9:05:17:28:
c9:4c:47:52:57:ea:25:b9:78:5c:16:32:58:68:1b:
18:2b:85:7f:f7:c4:48:7c:c6:17:db:86:dc:26:34:
ae:06:a8:5e:8c:2b:3b:6d:74:7a:ce:7e:c7:87:99:
14:16:12:37:50:6d:fd:57:dc:ad:59:ea:bd:0f:dc:
24:10:bf:a1:e3:e4:85:61:96:71:22:a5:40:3b:92:
6e:85:31:49:d4:d0:c0:62:41:68:9b:b3:78:71:ff:
4a:e5:4f:0d:56:e6:30:6e:f1:34:e1:4b:e5:52:0e:
83:49:d1:27:c1:b2:fa:db:33:6d:1f:dc:f7:f9:a1:
17:11:bb:08:a2:b9:0f:f9:bc:69:6c:4e:7b:00:b9:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:EC:2A:F6:7E:50:8E:B5:AF:A2:77:A0:A3:D1:7E:F1:8C:DA:F8
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:90:17:02:eb:80:e7:78:f2:a1:26:a3:ce:0f:45:67:d1:c6:
b5:49:87:5b:32:07:ea:69:b6:6c:d1:4b:2d:12:0f:b8:d0:14:
77:ae:47:bd:b9:38:27:36:e0:68:20:87:bd:e3:c4:65:21:5b:
a4:24:38:46:5c:0b:5b:a7:43:eb:7d:28:91:a2:cd:4a:cc:8a:
48:b2:de:45:95:e8:3f:41:66:23:5a:ad:ed:36:4f:a3:70:0a:
cf:c8:c3:bb:11:9d:72:94:ad:59:b4:a4:67:ed:9f:92:63:14:
d1:a7:1f:d9:63:eb:ba:75:aa:d2:fa:b6:4e:e1:39:24:b7:2b:
98:b8:d6:f1:21:0f:51:e3:1a:d0:02:47:58:b5:0f:2f:ef:9e:
f7:20:34:e0:ba:6b:a3:e5:49:5e:64:e7:9a:eb:6b:5f:ff:6f:
dc:27:a4:59:a7:ed:ba:bd:d4:7a:0c:be:8c:10:32:5c:0a:82:
d9:80:d3:f6:82:b0:0d:b3:25:89:c0:a2:8f:c5:6c:af:e9:c1:
41:f6:ec:9f:23:b7:f0:e8:c4:15:79:d8:5b:d6:f7:f0:e7:61:
de:ab:63:dc:16:95:a7:dc:d6:5c:28:80:fb:a4:87:ac:a2:db:
25:e7:85:a7:55:ad:41:74:f0:7f:16:38:ae:13:6e:76:32:87:
e4:41:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:57 2025 by rpki-client