Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: zGcODK1MH58pSg3FSK7Ur9XhggJHkH9GLmKAjIjYABQ=
Subject key identifier: A0:C7:36:69:52:62:37:E9:E1:91:B1:88:79:FB:61:BC:EF:CC:AB:58
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 019845BF66AFC49B56E60E1653FFDD8E862D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0DB7
Signing time: Sat 26 Jul 2025 08:00:28 +0000
Manifest this update: Sat 26 Jul 2025 08:00:28 +0000
Manifest next update: Sun 27 Jul 2025 08:00:28 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: fcI6XtwZABzjE3bLKiqpf7R58jzm8UnHnUc+SRlWuWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:66:af:c4:9b:56:e6:0e:16:53:ff:dd:8e:86:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Jul 26 08:00:28 2025 GMT
Not After : Jul 27 08:00:28 2025 GMT
Subject: CN=a0c73669526237e9e191b18879fb61bcefccab58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:6a:db:88:da:40:73:b9:f2:bf:99:ef:24:
03:17:61:32:c0:18:a0:62:aa:93:96:c5:21:be:6d:
89:6c:cc:84:63:83:85:c4:b5:29:d3:fc:0b:1d:6c:
ee:55:68:5e:98:69:a1:7f:61:f4:2e:e1:1d:82:24:
0f:55:00:c9:3e:36:4b:68:c9:78:5c:8e:7c:6d:ed:
29:0c:b5:ee:33:6d:52:47:fa:d4:6a:59:f1:b1:41:
99:18:a9:0c:32:27:4b:2a:ec:7d:2b:bc:74:47:b6:
44:be:11:9d:23:2b:88:8e:41:86:3a:f0:41:6a:09:
92:ac:a6:86:50:eb:7c:86:61:a2:e5:e0:9b:2d:b2:
f4:64:4d:a4:13:42:78:ba:35:db:d6:d9:77:1a:f6:
df:6a:c8:6d:3a:53:35:cf:34:b3:ac:d9:14:da:2e:
7e:bb:16:a8:d3:68:20:8b:66:65:f7:b8:a9:41:74:
a4:94:2f:de:fa:b5:f3:89:d8:49:f4:08:e6:c4:ab:
cb:c1:2f:15:9e:d9:83:13:1c:d0:9f:69:27:86:37:
2f:5a:7a:15:1f:ca:e1:b7:18:e5:14:88:8f:a5:08:
36:76:d3:d2:28:55:0a:25:5e:14:20:99:fb:75:3a:
6a:1d:20:49:62:7f:26:23:74:e2:b0:4c:28:c7:73:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:36:69:52:62:37:E9:E1:91:B1:88:79:FB:61:BC:EF:CC:AB:58
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:85:b6:ee:87:65:f9:48:8c:af:c0:d2:62:b6:c7:1f:2c:
50:44:4b:5d:ff:e7:5b:16:27:35:3a:c5:90:c4:dd:3d:09:90:
30:43:3f:02:1a:a3:d6:90:9b:aa:cb:af:cd:af:36:9a:cd:3a:
80:a3:9b:14:24:66:48:36:aa:4c:45:e3:ee:44:9c:c4:1c:ad:
66:a1:82:53:9b:90:e0:7b:c5:70:99:ba:d1:6d:02:a2:86:19:
13:70:b5:a1:0f:e9:67:26:10:c3:c7:b4:d6:5f:10:e7:35:75:
4a:61:4d:1c:05:ac:ad:fb:69:85:b5:cd:29:ca:af:65:be:1d:
83:e3:ec:97:ab:94:78:94:93:64:e9:3f:8b:70:c0:71:30:85:
22:72:82:4d:e9:b1:e7:aa:a3:4b:2c:6c:e3:cd:70:48:64:64:
21:99:c6:1e:eb:a5:98:dd:2b:bf:b8:50:4e:4e:25:79:42:0b:
68:5c:dc:d0:be:be:df:4e:54:ce:cf:11:74:3a:f2:9d:e2:38:
54:04:a4:57:bd:6a:3f:2b:51:ca:8b:6a:a6:39:14:a4:e6:12:
6b:53:a0:61:c0:66:a6:94:25:39:03:5f:a7:48:f9:31:7e:c9:
6d:d3:c9:97:c5:e0:fd:73:49:d0:6c:6b:07:b4:1c:ee:b7:ea:
51:a2:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:27 2025 by rpki-client