Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: IGF7hl71t6gkVNiQ0aqBfVRiCLTuo6evxyY7/zcXfxI=
Subject key identifier: AC:5B:E7:A5:BA:AB:80:11:43:5D:65:DA:BF:48:AE:84:EA:FC:E6:F7
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019A1A2AFF54148C6E12EB2FE30A99F91AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 07:00:16 +0000
Manifest this update: Sat 25 Oct 2025 07:00:16 +0000
Manifest next update: Sun 26 Oct 2025 07:00:16 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: Z4/W6ZVtBpDlRVbAuIvrK+qta3FGobGZPiK3n3hh2jE=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2a:ff:54:14:8c:6e:12:eb:2f:e3:0a:99:f9:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Oct 25 07:00:16 2025 GMT
Not After : Oct 26 07:00:16 2025 GMT
Subject: CN=ac5be7a5baab8011435d65dabf48ae84eafce6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:3d:40:60:5f:c9:bc:b1:97:16:78:48:2e:
bf:4f:c2:2c:d3:d2:68:a0:4d:de:b1:6c:09:7d:6d:
fa:4c:d6:6b:42:a1:68:90:7a:b8:f5:91:fe:2c:ac:
4f:ba:55:1c:63:5b:8a:61:fd:53:fa:d2:d0:f5:1b:
c9:53:00:21:6f:73:89:db:c3:26:44:b7:6f:39:00:
f5:b9:eb:8d:2b:76:e0:86:fa:df:22:de:45:35:44:
0e:e1:03:06:36:b5:f6:b7:41:d1:98:48:ac:b5:f9:
81:56:da:cf:07:a3:e0:c7:67:87:e7:6c:cc:1b:e0:
e6:98:26:47:20:7f:d1:95:b4:bd:26:fa:c7:2e:03:
b1:be:ed:dc:54:47:2f:b4:16:56:cf:8d:df:4b:e6:
33:ea:23:23:02:8e:67:ff:33:0f:7c:3b:00:f7:b0:
5d:e2:6c:f8:eb:6a:61:bf:f6:9d:04:98:b1:e0:92:
8b:56:54:c8:8d:8d:ad:d8:6b:12:5b:50:05:2c:33:
ee:c4:e4:b0:cc:13:9e:ed:71:55:88:46:69:a2:86:
78:44:d9:44:cc:ee:10:2d:4a:b0:26:5a:56:50:a0:
76:67:c4:a8:1c:b5:42:e6:0e:e7:57:99:87:33:62:
67:ac:3b:64:1c:d1:e8:55:c2:fa:af:a7:72:a1:12:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:E7:A5:BA:AB:80:11:43:5D:65:DA:BF:48:AE:84:EA:FC:E6:F7
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:16:9f:02:20:c9:e0:7b:3c:19:ac:72:73:b8:3c:31:57:
84:57:a3:b4:64:2a:68:76:20:07:6f:f2:4b:fc:59:4d:75:c8:
15:20:42:57:1f:9c:f1:45:4c:05:7f:fb:84:a3:e6:ed:3a:02:
a0:f6:2e:ed:0e:c3:36:6b:f0:32:98:c3:16:ef:28:98:d1:6b:
59:59:00:3b:c4:cf:ad:30:4e:36:71:8e:0f:17:f7:f0:77:e3:
75:79:b2:5a:a8:14:ce:8a:b5:45:cd:32:07:a5:54:50:b3:18:
c0:28:b3:2f:02:af:a7:fd:0e:3f:93:66:8c:f0:cb:97:a3:87:
a6:02:87:31:5d:12:09:3c:b8:53:e8:c1:92:9f:60:c5:f6:bd:
3c:34:4f:79:85:9d:7b:b9:59:ad:74:27:89:af:2a:76:c0:7d:
10:99:6d:51:f9:c9:51:f3:09:24:8f:9e:9e:85:ea:5e:04:e1:
bb:c9:33:2f:02:4b:f8:a2:66:72:2a:64:a6:d4:9b:95:3c:18:
45:a4:c8:e0:c5:ff:f3:40:7e:86:64:6d:ea:73:06:1a:a3:41:
fd:53:8b:5e:4c:17:8e:0b:83:94:23:fc:03:bc:52:bc:38:55:
d5:ab:6a:fb:c2:93:20:9d:c4:3c:74:63:92:42:4b:16:0e:2e:
2f:da:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:06 2025 by rpki-client