Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: utx9fV/w4yeXCb/zF8W1PtXitfv/dLFlxPv73DRB/LQ=
Subject key identifier: 43:03:0A:1F:17:36:57:73:DE:FF:7A:88:16:29:87:5B:90:A8:D4:88
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01984AE5CA9201D173667092CF431F37883B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1314
Signing time: Sun 27 Jul 2025 08:00:30 +0000
Manifest this update: Sun 27 Jul 2025 08:00:30 +0000
Manifest next update: Mon 28 Jul 2025 08:00:30 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 7hzRyZnQ8AmNkfVBXEfyXsTzxZglX9O8UtCH33qh7ts=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ca:92:01:d1:73:66:70:92:cf:43:1f:37:88:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jul 27 08:00:30 2025 GMT
Not After : Jul 28 08:00:30 2025 GMT
Subject: CN=43030a1f17365773deff7a881629875b90a8d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:90:3c:81:9c:dd:8d:a7:56:1f:c2:f5:6e:
c6:96:94:73:55:1f:3c:e8:34:0f:98:cd:77:6d:57:
7a:4f:49:56:3a:a3:cd:ba:5e:d8:fa:9c:ff:c8:b8:
ab:ff:2c:d3:1f:e7:a0:3d:16:ee:b5:5f:80:9d:a5:
71:5d:29:af:69:cb:0f:c6:2e:5c:57:97:e2:71:e1:
e9:66:07:08:e0:1c:d3:c4:94:75:dc:09:20:99:b3:
f5:31:62:04:42:52:64:33:1c:cb:e9:f0:9d:d0:26:
fe:27:8f:e1:13:ce:65:d8:dc:ef:3d:3c:54:ea:bb:
da:4a:4a:7a:22:d0:f5:13:00:22:47:48:60:9e:62:
16:54:d5:e3:58:d4:58:83:02:04:e7:4c:fc:13:92:
d8:08:4f:be:e7:44:32:dc:20:cc:f8:9a:45:eb:3a:
a3:22:b4:bc:0c:06:d3:1b:bd:93:06:51:c0:43:a4:
cb:c4:5c:8f:4b:62:92:a1:6d:bc:97:c0:ab:e9:be:
a5:e2:cd:bc:9e:a3:2e:f4:77:b5:5a:99:36:63:6d:
92:88:5c:2a:40:d1:c2:ac:db:c4:0e:35:36:39:b2:
34:c1:68:af:d7:74:21:e5:e1:e0:80:3a:02:e4:02:
cd:c4:aa:00:28:e2:7e:1a:d1:d0:e1:fe:35:ce:92:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:0A:1F:17:36:57:73:DE:FF:7A:88:16:29:87:5B:90:A8:D4:88
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:d2:e8:34:1d:54:bd:99:6f:7d:fb:3f:7f:4a:ff:a2:bb:
f7:cb:40:2b:4e:08:94:21:76:96:85:3e:c1:8d:de:33:33:ef:
68:f4:c4:a0:e4:6a:2a:37:ec:17:a2:ad:64:15:f8:be:9c:8c:
e3:d2:6c:c3:0f:40:99:8a:9b:47:7d:46:1c:eb:b0:39:81:e6:
c4:85:9c:55:ea:84:fa:08:cf:f4:60:9c:56:c3:7a:23:80:ae:
d7:7c:a8:09:53:a6:d7:4a:f0:dc:0c:24:05:86:70:54:e3:4c:
5b:9b:4a:fa:fc:e0:e4:1e:08:6b:9f:3d:77:d9:b3:72:c7:70:
a4:dd:27:5c:d8:54:45:67:be:10:b0:18:5c:b4:a5:ee:a7:ec:
73:df:66:51:26:f8:56:c7:e6:cb:b6:0e:42:c5:1a:9a:c8:70:
50:27:d9:fa:cf:df:e6:57:95:0e:b0:dc:5d:06:f6:39:4d:12:
06:13:ae:92:a1:fa:a7:24:05:1b:fe:9a:4c:c6:f3:48:52:98:
4c:98:37:09:fa:4d:f3:53:84:64:83:86:8a:28:eb:61:d3:ed:
0a:9a:ab:86:34:45:80:8b:10:74:01:a8:ee:ef:3d:8d:06:19:
86:ad:87:01:d7:77:f2:25:f9:ba:d4:d4:bf:1b:07:a9:39:f3:
b1:d8:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:44 2025 by rpki-client