Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: f6+cz8XU472q6ZNjUqdnjlUbYqBz80qYSbNPz8tYV+M=
Subject key identifier: 35:B9:6E:5A:AC:4C:51:C7:C3:6C:73:48:A5:0B:18:18:B5:97:C4:2A
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 01984965790472405F28D3DCAA44241AD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 08E3
Signing time: Sun 27 Jul 2025 01:00:43 +0000
Manifest this update: Sun 27 Jul 2025 01:00:43 +0000
Manifest next update: Mon 28 Jul 2025 01:00:43 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: lCVSrqncNpi8n95qB480dR3k/pgfCtzdHYH77e2FKR0=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:79:04:72:40:5f:28:d3:dc:aa:44:24:1a:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jul 27 01:00:43 2025 GMT
Not After : Jul 28 01:00:43 2025 GMT
Subject: CN=35b96e5aac4c51c7c36c7348a50b1818b597c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:c6:ed:d4:8e:ae:3c:52:19:26:7b:e2:f5:
ec:c2:bb:57:d3:be:5a:ef:91:07:a8:dd:83:64:dd:
28:31:f4:f2:27:39:ab:50:b0:df:78:0b:78:a6:32:
af:a2:38:43:b3:ad:6d:94:10:7c:17:2a:12:f7:17:
c0:14:f5:1b:ad:a9:ee:cc:91:13:a3:f3:c1:10:c1:
5c:e5:8a:a0:14:79:a0:20:c1:ad:82:da:61:7a:75:
f1:86:75:f6:1d:07:18:43:3a:8b:c2:83:d0:4c:e9:
f2:11:fb:cf:e5:8c:2c:cb:66:38:7e:52:bf:ff:80:
7d:44:8c:07:4c:de:a9:6d:01:54:0d:fb:7c:11:f5:
07:0e:cf:38:78:45:46:a0:21:71:53:73:18:94:11:
9d:97:dd:8e:ca:12:0d:bf:86:b9:b2:31:87:77:f9:
20:2f:40:49:c5:ff:36:d5:76:1d:e5:91:f5:7c:10:
bf:3e:7c:27:82:07:3f:69:c8:33:d8:a1:69:a3:28:
85:ce:c1:4d:03:0e:05:15:fe:42:36:9e:3c:92:f0:
7a:d8:67:43:94:ab:15:5b:52:bc:28:7c:77:4e:d2:
7e:b2:7d:b2:ef:fd:1a:06:8b:9a:ff:20:3e:10:21:
11:c9:48:6b:ed:6a:4d:3c:4b:c5:4e:a8:1b:d8:ff:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:6E:5A:AC:4C:51:C7:C3:6C:73:48:A5:0B:18:18:B5:97:C4:2A
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:e4:ef:8b:3b:4a:34:c0:60:dc:d1:2a:43:80:25:0c:93:
67:43:53:44:cf:c3:60:58:e1:d1:7d:8e:19:01:46:37:b5:a2:
6a:60:93:a8:15:94:69:2f:b7:71:86:34:66:78:e0:41:ce:c1:
56:b0:e2:86:11:8f:66:9a:a7:f9:2f:c9:60:c0:bf:b7:2e:35:
20:56:69:e8:06:54:d1:4f:d1:11:60:3b:37:2e:43:ba:44:65:
67:73:d0:d8:38:08:1a:47:b5:79:73:f6:bf:d8:77:d2:6b:a1:
01:f7:c2:e2:15:e3:fd:d6:85:90:10:a7:c7:9b:f2:f7:94:43:
4d:8b:cd:f9:44:d6:a3:d9:e3:3f:35:8f:df:81:55:cc:43:2b:
23:c7:f0:19:22:da:7f:a5:7d:d3:e6:0e:15:7d:eb:40:2c:bb:
f9:0a:e4:6e:07:31:30:a7:f0:99:51:36:7d:0a:25:d1:65:a8:
8e:aa:2a:23:01:b6:c6:7d:ed:f3:83:3c:87:bd:ff:a1:11:c3:
d0:e9:50:7e:65:ee:2d:75:80:0c:b8:3f:1b:9f:c6:d5:92:e6:
b4:31:4d:77:99:dc:84:23:fa:aa:90:2b:95:7f:33:93:77:dc:
53:4f:99:26:c6:18:55:4b:fb:4a:ef:57:b2:a8:7f:3c:75:89:
6d:12:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:18 2025 by rpki-client