Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: xfTXTDEhUR5CtBujgvyLpAjQbJU11FZ7WsnL6OEDOqw=
Subject key identifier: 09:36:39:79:CB:6E:59:24:7B:FB:EE:E0:03:8C:C6:9F:A1:7D:8D:DF
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 01984B8A52B84AA138999C10F81371B0E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 11:00:12 +0000
Manifest this update: Sun 27 Jul 2025 11:00:12 +0000
Manifest next update: Mon 28 Jul 2025 11:00:12 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: Hll/jp2dl9xHCome2Jp/cmPES2b2QcaM41ngKFu3Kss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:52:b8:4a:a1:38:99:9c:10:f8:13:71:b0:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Jul 27 11:00:12 2025 GMT
Not After : Jul 28 11:00:12 2025 GMT
Subject: CN=09363979cb6e59247bfbeee0038cc69fa17d8ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:4e:c0:ac:ea:19:8c:05:7b:10:47:0d:55:
6f:16:52:2a:77:d9:6e:d1:d5:cd:6d:f2:68:3f:48:
2d:b0:06:ca:db:10:f0:52:63:51:bf:97:3c:73:1b:
a2:ba:fb:f8:a2:a2:4d:f0:13:0a:c6:42:84:81:11:
0a:85:7e:88:e9:16:bb:07:58:30:19:e6:cb:47:59:
cc:b7:8b:a5:03:82:c2:61:f9:ce:31:ef:bb:7d:af:
79:db:08:2b:64:64:b6:c5:ea:ab:fd:b4:da:cc:3f:
b9:b5:2d:8e:71:e3:28:bb:a0:ba:b9:ea:e9:fe:6e:
7c:33:45:7c:50:fb:4f:51:31:39:88:30:50:ff:70:
ed:11:37:5a:26:2d:51:c1:3e:31:c5:96:fb:fa:48:
6c:4f:4e:24:39:66:6e:d4:66:ac:b3:37:17:98:42:
dc:51:75:e4:74:b5:6e:5e:90:08:a7:69:cf:2b:03:
5a:41:f0:0e:c9:14:86:61:66:f7:58:1d:57:78:4a:
c1:0e:14:76:f5:62:47:a2:9d:61:07:c1:1e:5c:d4:
49:28:5f:90:03:13:a3:a6:3d:9a:cb:47:4d:0a:a9:
05:e9:18:d5:f4:0d:5b:5c:d5:67:63:fb:a8:ec:ee:
e6:df:6f:6a:57:32:79:38:34:64:6c:df:04:f9:09:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:39:79:CB:6E:59:24:7B:FB:EE:E0:03:8C:C6:9F:A1:7D:8D:DF
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:e9:44:2f:e0:a5:b3:0d:63:78:11:ed:5e:61:f6:e7:2c:
bf:09:1b:f9:fe:65:0b:f0:cc:79:f8:ae:b6:32:c6:1d:eb:93:
83:10:6f:80:6c:63:69:e8:09:da:9b:e8:7e:04:92:c3:85:e9:
f7:93:42:a9:9f:3d:e5:0a:57:d3:3a:5e:ac:10:24:f1:f7:a1:
ac:fc:91:89:ee:ec:27:af:1d:68:10:b6:95:01:8b:f1:55:e8:
64:a8:3b:de:c0:cf:77:d2:f8:89:8a:e9:93:72:e5:ac:9a:22:
e9:58:c8:a0:c4:dc:d8:9d:8e:30:37:9f:e5:2e:3e:8f:fe:a4:
b4:6b:5a:d0:09:51:28:90:45:2b:41:81:ce:24:f6:bf:87:46:
57:5f:b7:a8:8a:b1:d3:2e:65:c3:3f:ec:b9:1d:d0:cb:0d:e6:
06:ed:d0:fb:d3:eb:2f:93:b2:be:c3:8b:f6:36:e4:fd:e9:50:
20:ab:c0:de:9a:29:1c:61:36:1c:23:3e:6d:83:0d:5c:3c:fa:
56:66:60:82:74:a2:0c:17:18:1e:81:5a:d4:0a:47:ed:66:4b:
ff:e0:51:7f:fe:e6:94:fb:e0:bd:b0:dd:09:84:00:c6:e5:a3:
7a:48:ea:c2:d7:54:98:7e:94:f3:93:f0:b6:cb:36:2e:2a:81:
bf:b5:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:05:51 2025 by rpki-client