Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: JFybf3qLyZIL1twp9XRgoLvChJ1H/xQo5OWe1Uv27DE=
Subject key identifier: CA:42:DC:55:5C:42:EA:E6:6C:ED:EA:A4:6C:92:08:FC:E8:3F:3A:0D
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 01984219D9B5EE91244506E2748D1220D878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 0319
Signing time: Fri 25 Jul 2025 15:00:47 +0000
Manifest this update: Fri 25 Jul 2025 15:00:47 +0000
Manifest next update: Sat 26 Jul 2025 15:00:47 +0000
Files and hashes: 1: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
2: QALT4vP68jQK_Ar_borHkTlaA3c.roa (hash: sVdKC/vvWqKqYdfIyWzeWLHS2Hbp0xOgwsKlY4l69YU=)
3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: A9O+oHApVnRUDiRxfN49XYfs6RnX0fyzggm9ftaDma0=)
5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:d9:b5:ee:91:24:45:06:e2:74:8d:12:20:d8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Jul 25 15:00:47 2025 GMT
Not After : Jul 26 15:00:47 2025 GMT
Subject: CN=ca42dc555c42eae66cedeaa46c9208fce83f3a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:37:ee:94:0e:56:58:46:2f:6e:8d:34:83:
93:ef:e5:f0:67:16:c4:1a:37:d1:9c:53:99:6f:fd:
38:c1:51:13:06:ea:ad:44:81:36:9e:1f:2c:cd:17:
1b:a3:77:8f:b8:a6:cc:46:36:6b:37:69:16:c4:4d:
8e:3f:f6:e6:23:75:9c:50:c7:24:9c:58:fe:4a:69:
28:f4:c7:dd:d3:14:89:74:1c:73:38:13:68:46:80:
16:ff:e4:e5:a2:92:e8:15:ab:12:2c:80:7e:40:29:
e2:2b:e6:85:c6:a5:11:a6:c7:73:2e:4d:f5:46:5d:
58:0f:a5:a6:81:e9:ff:a7:8c:e1:4c:2a:04:47:66:
df:f1:ba:0c:fa:40:a6:bd:dd:f1:e9:39:7f:aa:7a:
a2:94:8f:21:c3:ce:9b:7e:87:c8:6d:f8:73:4f:37:
9b:32:b2:74:40:ff:07:57:7b:cd:71:ac:d3:bd:bf:
fd:51:a6:84:36:ee:37:3e:c8:97:02:4e:63:65:2a:
e8:70:7e:82:3c:62:d5:12:90:d3:ea:49:e8:ae:03:
39:9c:5b:3e:df:c5:ad:7e:39:3e:cb:ab:69:ac:05:
60:a9:c4:9a:d3:a7:9d:85:17:d7:fd:82:8f:0f:ee:
7e:24:ab:25:cd:a6:13:b2:a6:eb:38:ff:12:ca:34:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:DC:55:5C:42:EA:E6:6C:ED:EA:A4:6C:92:08:FC:E8:3F:3A:0D
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:0b:01:f4:a5:2c:00:cd:96:1e:57:9e:87:c3:b1:a0:94:
b7:1d:08:ef:3d:7b:20:0b:e6:62:5d:44:d1:39:a1:19:44:8e:
65:9b:80:52:c2:cb:ab:4c:3b:48:7b:48:ef:eb:6b:8b:00:88:
19:ff:39:db:aa:c3:b6:bd:39:85:9b:17:9c:b9:71:b4:98:00:
51:68:ca:d0:87:e9:a7:ce:2b:fe:f7:0d:6e:d3:3b:e9:76:e9:
ac:4d:36:a2:fc:c9:b9:7f:6a:74:3f:0a:c0:c5:45:96:34:df:
17:aa:40:ad:e4:44:b8:a6:65:e2:10:48:af:43:b5:48:19:4a:
cf:28:a7:21:66:ff:a5:09:0d:57:17:62:4c:52:cd:97:b0:4e:
3d:63:9c:74:1c:c9:bd:f9:24:b3:b2:e8:65:9b:e6:a0:5d:75:
7c:82:92:e7:a5:02:54:c2:a2:ed:25:89:5f:66:7b:2d:43:79:
8d:f7:d8:c5:4a:64:52:f2:54:43:5a:b4:ad:cd:f7:37:e0:bd:
22:35:f2:41:b6:24:b7:70:44:7a:2b:e9:26:90:2b:d8:71:a7:
09:fd:c3:1a:cd:08:cc:2d:32:c2:48:7f:b8:6e:51:f2:3b:22:
c4:eb:90:66:de:3a:af:b6:1c:e5:25:93:9e:97:01:78:aa:32:
ea:52:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:16 2025 by rpki-client