Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: PX5OwXHqyClwAHN58eYjMFWtv6FJnh6GRFeFoXPfGE8=
Subject key identifier: A0:94:AC:78:B2:41:CD:4D:16:1A:6D:7D:8C:F2:F1:4B:F5:FC:0C:3A
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 0198432C4776E9765B0774CEE46C4F71852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 031E
Signing time: Fri 25 Jul 2025 20:00:32 +0000
Manifest this update: Fri 25 Jul 2025 20:00:32 +0000
Manifest next update: Sat 26 Jul 2025 20:00:32 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: PzIqd8RRnE+CZLhNDtCYNIH4kZIheZv76QlXrw/ctns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:47:76:e9:76:5b:07:74:ce:e4:6c:4f:71:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Jul 25 20:00:32 2025 GMT
Not After : Jul 26 20:00:32 2025 GMT
Subject: CN=a094ac78b241cd4d161a6d7d8cf2f14bf5fc0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:da:dc:55:9d:bc:93:d2:fe:e0:df:11:f9:
0b:d4:86:58:27:74:cb:e7:24:77:09:18:30:fb:8d:
62:3e:a5:38:4c:d9:86:bd:88:91:22:73:f9:d9:c1:
d8:92:1d:12:92:29:34:33:59:aa:93:60:57:61:20:
a7:e6:0c:31:1b:6c:f0:f9:e1:8a:d2:e3:b4:7b:7f:
aa:99:2e:08:be:38:6e:4e:db:04:83:76:ea:06:41:
d3:e6:55:3b:97:92:ba:f4:8f:f8:d6:f9:d7:f1:a4:
37:8f:95:e3:a9:ff:f8:9c:9d:4c:cf:93:c5:39:ae:
b7:e2:35:b5:1b:44:3f:57:48:35:9d:8d:de:41:48:
01:11:80:10:68:68:2e:99:e4:a9:cf:67:8e:e1:48:
c0:f4:3a:f3:f1:c7:98:ec:34:fc:94:d7:80:84:33:
a3:ea:91:3a:98:da:1b:fc:81:24:d0:d1:4e:ee:cb:
de:43:ee:c2:d3:ef:16:1c:53:de:b0:bd:3e:5e:fb:
4e:cf:00:a2:7b:3f:d5:38:eb:19:34:0b:b9:90:95:
9d:f3:58:39:21:d8:ee:99:a9:5f:09:3b:2c:a7:6e:
53:12:f0:44:17:64:30:f9:71:1b:09:73:ef:44:c3:
7f:0f:7c:d2:02:5e:7b:b7:7d:2c:9c:89:e8:7e:10:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:AC:78:B2:41:CD:4D:16:1A:6D:7D:8C:F2:F1:4B:F5:FC:0C:3A
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:8d:d1:82:1b:29:47:ed:79:c0:fd:a8:c0:df:d0:90:ed:
42:07:43:cc:ee:1e:09:ed:c0:f9:da:3f:68:e7:d6:4c:78:50:
6b:bf:d0:b4:ed:f7:d8:2c:b0:25:40:5f:3f:15:40:ef:20:69:
01:b4:8b:15:4a:a1:4e:cb:7a:83:fd:0e:55:bd:48:dd:23:cb:
82:27:bf:60:d2:25:dd:cc:4d:03:b6:cc:eb:15:15:d9:54:bb:
8a:40:d7:c4:aa:3b:c8:6d:72:68:4b:0a:46:85:9e:a4:19:0a:
cc:41:5b:39:7b:8b:3f:1c:37:05:10:1b:22:0f:3d:80:d9:3d:
18:e3:0c:f1:ca:b4:19:d7:e3:0b:18:e9:33:57:d8:95:76:6c:
92:14:2a:ae:1c:53:ef:d0:55:cb:86:41:f6:93:47:fd:fa:40:
bf:cc:e9:16:e6:d0:a9:2a:25:20:81:e1:1d:f5:28:5b:be:f1:
5d:d7:7c:6a:36:91:27:7d:54:8a:9b:df:20:e0:6b:50:2e:43:
d0:44:1a:e4:6a:7e:29:80:a2:ad:3c:64:1e:e4:f4:66:ff:bd:
03:22:07:be:7c:86:42:1b:13:a8:df:54:c9:52:6a:b8:ac:38:
27:32:05:9a:3b:da:e8:3d:66:d8:2e:2c:11:d5:ca:d2:ce:29:
e7:5d:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:04:07 2025 by rpki-client