Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: I5K8IQOgYGRJ50q2VRCZCsAdf0U17f8vyfiTEPoR428=
Subject key identifier: AE:7B:38:E2:FC:D0:C0:1C:60:90:96:2C:45:88:A0:58:0C:98:97:A7
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01984B54B5B41DBCC60941043CD91ADAC066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:01:39 +0000
Manifest this update: Sun 27 Jul 2025 10:01:39 +0000
Manifest next update: Mon 28 Jul 2025 10:01:39 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: GkHWSRypUu/G6AY/+ZYRyDDgi5iZl1EFyUXTDN6v0/4=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:b5:b4:1d:bc:c6:09:41:04:3c:d9:1a:da:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Jul 27 10:01:39 2025 GMT
Not After : Jul 28 10:01:39 2025 GMT
Subject: CN=ae7b38e2fcd0c01c6090962c4588a0580c9897a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2a:39:33:24:40:3d:8c:f2:cd:39:28:7d:bd:
38:c9:15:6a:3d:43:47:44:b6:52:f4:1d:fb:ce:42:
b2:5e:d8:3f:b8:53:0e:9f:b1:3c:65:17:7d:f4:f7:
5a:1e:d9:d3:7a:76:ee:05:8c:55:79:fe:bb:bd:38:
4f:f3:23:8d:b4:b2:b9:8e:19:6b:29:ec:46:25:9b:
0f:f9:ac:48:0f:7d:be:63:52:d3:40:ea:0d:60:24:
a7:6f:9d:6f:84:f4:00:56:3c:7d:66:85:6a:32:17:
d7:cb:ff:6a:a8:0f:b4:62:89:3f:ad:4d:90:a7:77:
e4:d9:4d:bd:d2:5f:4f:59:ce:7f:1b:53:61:95:d0:
3b:79:90:b0:0d:8a:51:7e:fb:40:64:e9:f9:55:75:
86:a1:f6:ac:50:64:7f:7f:b5:bf:18:0a:e2:fa:d3:
3d:ff:d3:1e:5d:1c:83:ee:4f:d8:00:1e:ce:b4:8e:
ad:66:00:1c:0f:6f:4c:4f:e9:ba:3b:5a:99:a0:a0:
82:6c:a5:25:c9:3f:5c:ac:d5:4a:16:40:fe:ab:8b:
4d:bd:2b:2c:7a:70:04:f4:10:a1:b8:3a:66:b4:90:
56:8c:d8:c6:60:66:34:6e:eb:42:5b:13:3e:8d:07:
c8:54:fd:a7:36:da:f9:dd:2a:94:ac:da:4c:ba:0a:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:38:E2:FC:D0:C0:1C:60:90:96:2C:45:88:A0:58:0C:98:97:A7
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:8b:22:e0:5f:59:85:09:d1:ac:70:73:b9:a1:90:c0:85:
a2:5a:19:2d:89:4f:1c:10:e0:29:5b:b4:c7:6a:71:c6:a5:dd:
9d:cf:54:e9:23:66:09:33:82:58:0e:3c:53:47:f8:78:a0:29:
7e:51:76:b3:5c:c9:57:04:24:47:21:c9:6b:86:11:0f:fe:35:
e1:87:ec:47:6f:16:9d:60:bb:ea:58:28:88:7a:69:84:4c:68:
5e:da:a3:aa:af:3c:bd:f1:59:44:0f:d4:21:78:8c:17:78:98:
94:6e:f5:91:e3:d8:2c:d2:b0:85:08:45:87:7e:f1:cd:35:6d:
63:8c:a5:c7:6a:09:d1:3f:f4:7d:b9:4e:56:61:15:e5:5c:0a:
33:2c:e2:7a:93:c1:3e:65:37:3d:8e:6d:f0:b9:aa:0d:bd:e5:
94:2c:1a:a3:4f:69:4f:e2:47:fd:b6:ee:24:cb:c0:0a:cf:20:
7d:50:03:59:60:86:06:66:0c:56:3e:21:3f:08:d8:90:94:d2:
ee:3f:37:17:7e:90:94:a4:a8:35:4b:be:88:a4:db:61:5e:96:
c3:88:8e:e1:59:8f:c9:73:b9:92:88:8b:f3:38:54:2c:94:0e:
e2:09:1f:e1:1f:b8:db:92:0b:5c:03:88:7a:be:f2:47:f9:de:
71:65:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:00:47 2025 by rpki-client