Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: yV1n0MyM2KvgOLVtBIgjLA5xdCol4QBmQd8olkH2yA0=
Subject key identifier: 8B:47:66:86:09:2D:D1:9A:5D:49:A7:C2:CC:5D:2B:45:96:1D:D4:08
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019A4F2B2826B07E9EEBB06DAFBC7CD01B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 17C6
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
2: QE-0-GHrWq5bT_oQzBuxsGZ0jgg.roa (hash: Whew7oC4VAA4M2out/vzMuiYeBE1U3ZiPJv+gEs+1dU=)
3: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=)
4: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
5: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: ZXS4KyMHA5YaMuuel2TGSThYTelSVh4D0kFVEWVlZO8=)
7: sCbiretHkvpeYn6X-YO7yjpBd3I.roa (hash: m4o26nuHfI88h55NDmirhyFa20WJfqvTKSftUFTfvL0=)
8: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
9: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:28:26:b0:7e:9e:eb:b0:6d:af:bc:7c:d0:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=8b476686092dd19a5d49a7c2cc5d2b45961dd408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:86:ea:97:e7:e7:8e:2c:03:5a:b4:a3:c7:
c0:81:a2:fc:dc:4a:4a:ab:ff:52:40:e2:e1:6e:c0:
ed:02:59:b2:2e:29:69:1a:5d:e3:c0:bd:d6:40:b2:
73:02:3e:8f:6a:c9:72:6e:b7:61:74:79:df:bc:a0:
01:c8:95:9e:70:ba:b7:06:6a:ca:c7:e3:c3:73:ed:
72:40:35:b3:c1:01:65:45:17:ea:7a:bf:bc:2a:04:
80:7f:26:d1:fe:e2:96:f1:1d:68:22:a0:af:1b:2a:
ab:e8:5e:72:97:4a:93:5f:d8:1c:d7:6c:c3:45:cf:
b2:27:7f:37:22:fe:32:02:f4:d4:26:a0:56:81:78:
32:57:79:f7:84:a1:a5:d4:a4:20:cb:cc:0b:a0:c0:
40:0b:c7:9a:bd:65:13:0b:26:69:94:44:22:87:79:
dd:b4:21:bd:77:48:e9:02:f6:1e:aa:54:42:e9:55:
66:a2:4e:e1:a0:c7:93:3c:a0:9c:9e:8c:d2:1d:3d:
eb:a1:93:58:03:65:8f:6e:4f:0c:c2:91:75:20:2c:
9e:f0:22:f7:21:33:b0:8f:f8:5e:85:71:17:d0:10:
27:da:fa:cf:e8:a4:6a:31:3d:2c:a1:6f:0a:ac:95:
99:4b:6a:c0:1a:d0:14:e2:96:2b:ef:62:7d:fb:38:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:66:86:09:2D:D1:9A:5D:49:A7:C2:CC:5D:2B:45:96:1D:D4:08
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0a:73:dc:8e:40:6b:d3:7f:21:e5:c3:fc:c5:22:7c:1c:35:
8b:43:77:a1:c8:e6:4f:b5:ec:59:b4:1a:51:9d:31:a0:d0:aa:
50:e5:d7:c8:52:8b:03:b0:b1:71:63:fe:16:e1:63:ee:77:27:
5e:e3:a9:e9:9c:da:62:49:43:31:77:e5:61:f7:f4:cd:33:10:
83:04:49:fd:62:9d:f1:23:34:6a:4a:c9:bc:a6:1a:d3:83:3c:
67:83:73:32:f1:6b:96:25:57:e7:68:2a:8b:69:3d:73:33:75:
ae:51:6a:a1:ad:9c:5b:cc:60:ba:cd:9e:66:bc:d6:fd:28:39:
ff:f8:13:49:86:d8:9d:51:12:84:45:1b:6b:da:5b:f5:5d:55:
03:01:4d:8d:40:ff:7f:ef:98:1d:0f:3f:07:e7:6e:82:49:13:
31:cf:06:a8:bb:4b:ed:50:06:65:40:51:8b:6a:21:0b:6f:ab:
1b:e5:32:13:3c:cb:0e:a8:5a:4b:38:90:45:62:e9:d2:fc:38:
73:c6:e1:0f:b2:f3:61:8d:22:40:9e:50:e6:03:55:47:64:6d:
c1:76:0c:48:6b:a6:b6:cf:a6:93:f9:d5:46:50:85:e9:95:e9:
1e:12:51:00:80:ce:6f:43:96:64:95:dc:34:01:3d:10:85:ac:
63:d5:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:53:55 2025 by rpki-client