Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: oDWS4saknBilI7qYJiCf61NKb2ojbva9/TGGHhRk/DI=
Subject key identifier: 80:8C:9E:5C:D4:A1:F2:CB:0D:90:3D:49:F7:4B:01:96:E4:AD:5C:C7
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 0198496599746D05DCBA7175AFBA9DC74DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 13DF
Signing time: Sun 27 Jul 2025 01:00:51 +0000
Manifest this update: Sun 27 Jul 2025 01:00:51 +0000
Manifest next update: Mon 28 Jul 2025 01:00:51 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: mM3BbRODYpucKbtdgKOzGf9DiEA0Uviw3UFwHTuOLrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:99:74:6d:05:dc:ba:71:75:af:ba:9d:c7:4d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jul 27 01:00:51 2025 GMT
Not After : Jul 28 01:00:51 2025 GMT
Subject: CN=808c9e5cd4a1f2cb0d903d49f74b0196e4ad5cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:56:91:eb:0c:46:4d:4d:17:35:75:ad:00:
fc:bf:73:e9:66:8a:10:cb:f5:08:2d:0d:02:31:f8:
81:cf:85:1a:da:ee:c7:34:2d:73:46:b7:9e:78:7a:
f1:f3:e0:b2:60:48:2b:ea:d4:6b:12:3a:24:0e:8a:
4a:55:3b:6e:8d:2d:ce:46:96:90:8a:6c:f9:42:ad:
c3:13:03:66:7f:d9:95:19:ad:5a:db:3e:5c:b5:0f:
5e:8a:d2:ff:9c:05:86:0b:6f:4d:84:3d:17:65:64:
72:fa:8b:4a:69:3b:cf:cd:38:52:09:d6:92:43:4d:
dc:74:55:0b:cf:04:66:e1:e4:1c:58:8d:0e:07:04:
93:32:19:57:9c:54:94:54:d0:a2:09:68:66:61:86:
7f:24:e0:60:32:9c:ac:e6:48:ac:44:67:a1:5d:76:
7a:73:cc:67:fe:eb:ad:f7:7c:59:7c:da:0c:09:aa:
6a:f9:81:e0:8a:26:d1:cc:c3:81:23:23:4b:3c:b5:
57:48:f6:4f:c8:b7:66:4a:c1:e0:e1:1d:e9:70:f5:
c5:e9:63:06:e7:e9:b5:ed:1e:f6:16:48:a9:f9:56:
37:0a:eb:02:7f:9b:9c:4f:ec:09:83:f7:6f:5e:c0:
3a:c8:a4:c0:f0:e1:bc:76:82:a7:b1:eb:8e:20:7c:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:9E:5C:D4:A1:F2:CB:0D:90:3D:49:F7:4B:01:96:E4:AD:5C:C7
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:ea:70:c9:38:04:56:62:70:e6:50:53:fb:72:78:ac:87:
3b:33:fd:ad:8d:ac:84:a0:87:a5:63:69:b1:e0:6b:60:14:16:
92:92:b2:82:11:d1:c6:36:c1:e6:2f:a8:33:c0:25:6d:7e:82:
13:fb:bd:66:97:02:30:d5:eb:4d:86:e9:33:ca:9e:74:96:66:
cb:84:79:60:24:f6:4f:c5:eb:ee:83:06:13:bd:4c:87:70:10:
45:65:7f:bf:9d:37:2d:5e:b1:94:84:27:e7:bb:37:5f:44:38:
02:96:ed:42:5c:cc:0e:e0:77:42:45:b3:d6:00:97:3a:fe:0d:
ba:d8:8d:21:9c:42:de:1e:cd:6e:2d:4c:3c:67:f9:19:f8:b0:
af:eb:7d:64:f4:e6:58:b9:ee:67:e5:f9:78:39:95:30:42:1e:
89:a5:27:48:6f:2a:08:a8:4e:e8:b1:6a:2f:c9:5b:e9:e5:c3:
36:aa:ab:0c:33:71:25:95:1b:25:9c:1e:e4:32:74:c4:a2:d3:
7d:58:87:bb:06:67:10:03:e9:00:8b:a9:92:b2:ac:50:33:11:
b5:14:76:40:fb:68:37:dc:9b:10:71:ec:b5:9d:11:61:b9:ff:
f3:8c:c2:95:5f:55:ba:56:20:31:46:b2:7a:f5:bc:d8:3e:d4:
76:e0:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:44 2025 by rpki-client