Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: vro6+znIOajcRgNENEiioA22rXjvL1Tsjq5gJo7Zpw8=
Subject key identifier: F2:A8:3A:84:FD:06:4B:F6:2E:F3:95:41:89:75:2A:EB:46:A3:84:C5
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 019845889746AB89953772042BD5BFB75BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 016C
Signing time: Sat 26 Jul 2025 07:00:36 +0000
Manifest this update: Sat 26 Jul 2025 07:00:36 +0000
Manifest next update: Sun 27 Jul 2025 07:00:36 +0000
Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: oRIUnjzM2Roajj81CMOuarzAS3ia3nlcDzXQOO7o1oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:97:46:ab:89:95:37:72:04:2b:d5:bf:b7:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Jul 26 07:00:36 2025 GMT
Not After : Jul 27 07:00:36 2025 GMT
Subject: CN=f2a83a84fd064bf62ef3954189752aeb46a384c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:83:11:bc:0a:4d:ce:f5:80:ea:a1:03:07:
a0:fc:c7:76:55:fc:90:34:02:39:54:02:fb:3a:af:
50:22:69:c5:7c:45:52:a9:17:29:d9:f1:2b:4b:27:
cd:82:a3:71:37:6b:da:f8:95:3b:83:83:36:27:6d:
65:fc:bd:82:85:0d:11:ba:1b:8e:69:23:73:d5:c3:
3e:7f:ec:bb:28:b2:a8:5a:63:43:50:3d:56:a9:39:
99:e0:54:70:e4:51:3b:bd:dd:b6:e0:5e:37:3a:27:
c7:d7:3d:ad:0f:6d:a5:1b:f3:87:97:0b:2c:d5:44:
fa:99:63:f3:39:f7:84:b4:10:2f:07:07:78:6b:16:
06:71:6b:9f:42:8b:a1:62:48:11:bc:6c:af:80:a5:
24:21:e9:05:4d:5e:0d:08:cb:f5:4a:33:76:54:8e:
7f:b0:84:8b:db:13:19:70:2a:3a:4d:12:de:8a:b0:
98:ec:6c:0f:9f:bb:f6:d1:b5:cf:a2:3e:14:e8:d3:
58:00:f2:52:78:21:24:0c:96:0f:1b:58:7c:16:0f:
a9:5e:e1:03:ba:46:b2:f0:22:7a:b3:4e:55:64:b4:
ba:e3:de:6a:8e:f9:7e:36:0c:5a:b0:81:3f:39:bf:
47:39:1c:cd:96:ff:d9:a7:c5:2f:06:17:4b:4b:22:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:3A:84:FD:06:4B:F6:2E:F3:95:41:89:75:2A:EB:46:A3:84:C5
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:be:6b:28:6d:2f:53:3b:87:f3:44:40:79:f8:df:7f:e9:2e:
a8:bb:72:ff:b9:7f:07:e9:1a:16:27:8f:e0:22:1d:32:22:b7:
4e:01:65:c7:6e:15:f2:70:e1:26:a1:b9:f7:75:92:6e:c0:1d:
5e:16:69:6a:62:7c:c5:ee:b7:81:43:ac:3a:e4:56:04:63:4d:
c1:07:4b:f0:67:2a:e7:1d:5d:8a:ec:5c:44:73:e4:a2:f8:7a:
4c:cd:a3:e9:ce:6b:c9:94:4c:58:cb:ab:00:37:1f:79:93:e9:
9c:1e:da:f0:4c:bd:7c:7d:aa:59:1d:8e:9a:7b:5e:04:0f:2a:
80:c1:fe:a4:26:00:84:02:35:cc:13:bc:0f:5d:02:e9:07:51:
04:5e:0b:a1:2b:00:25:e2:d3:bb:4f:e8:8c:aa:a6:be:f1:5e:
37:cf:4e:a1:d2:23:14:3f:dd:18:23:21:d6:5e:5b:13:56:4e:
5f:36:37:ee:fa:d1:18:b6:79:bc:1c:27:88:64:15:49:f4:b7:
a6:81:2a:b2:10:5a:00:dc:6f:42:bb:6d:db:1a:08:00:09:f2:
32:a8:70:8c:03:cf:e8:8e:bd:b3:f4:9a:e4:b0:a2:ac:e1:fa:
7d:88:a7:5d:2e:5c:40:8e:af:fc:9c:09:31:79:2b:47:76:4f:
fe:2d:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:09 2025 by rpki-client