Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: XjNJwQsXUpyoJyV4lNb2pHspEwCAmLcIFHNAHxEyMK4=
Subject key identifier: 30:E5:B1:F9:15:29:67:9E:CE:8E:CF:27:5B:BE:1B:AF:8A:A2:F3:56
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 01984965A70EE25F9D519E0CD6013E4C186F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 01:00:55 +0000
Manifest this update: Sun 27 Jul 2025 01:00:55 +0000
Manifest next update: Mon 28 Jul 2025 01:00:55 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: BYq4O3zFzwwgYtRgzTXIrRzI3G6Fu5UUoy9aVGvDq2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a7:0e:e2:5f:9d:51:9e:0c:d6:01:3e:4c:18:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Jul 27 01:00:55 2025 GMT
Not After : Jul 28 01:00:55 2025 GMT
Subject: CN=30e5b1f91529679ece8ecf275bbe1baf8aa2f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:5c:9f:4e:7d:03:a0:f1:7d:d8:0e:bb:98:
de:17:99:24:62:c1:e4:b7:41:fe:73:ca:de:7f:94:
8a:4d:04:4c:27:20:4a:c3:90:cb:f5:96:52:b0:8c:
b2:89:b1:cb:7b:61:06:f3:61:f5:20:b4:18:d2:5f:
1a:b1:c1:8f:37:60:ec:d6:4e:b0:af:ce:e7:ab:8f:
c0:1f:cd:45:73:c8:21:c7:3a:86:16:c6:d8:98:f9:
d2:3d:24:af:d8:5a:f1:8e:39:c5:d5:a8:be:aa:12:
b7:0f:1e:fd:64:88:1b:90:c8:e0:81:8b:55:f9:d0:
52:d8:e9:e5:65:0b:e2:4e:7e:05:57:53:f8:9b:d1:
ed:9a:9e:11:c4:d1:d6:a5:cd:cf:5a:e9:74:5a:16:
e3:c7:96:b4:a0:ee:fb:ee:c6:14:8d:d8:0c:78:37:
d2:76:f5:08:03:79:d0:71:37:ad:4e:99:c4:ad:6a:
f2:42:23:de:c9:59:ad:17:6d:fe:a9:ef:36:d0:a5:
ad:ba:b2:16:75:3d:b0:e4:85:3e:fa:4c:75:a9:84:
2f:5c:6c:1b:22:a5:9d:2f:f8:fa:a0:a4:88:99:1f:
89:22:06:b9:d2:5e:5f:3f:f6:c9:25:70:5b:c9:e8:
54:d0:e3:0f:ac:32:d1:50:b9:6f:71:1d:d7:77:30:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:B1:F9:15:29:67:9E:CE:8E:CF:27:5B:BE:1B:AF:8A:A2:F3:56
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f4:89:ff:b1:30:f4:21:f8:4d:38:90:c7:e1:e6:42:c9:c2:
52:d4:3c:07:78:65:00:f7:5f:cf:98:62:81:5f:61:11:6f:2b:
f2:23:55:2c:8f:bc:18:0f:d6:a5:15:30:72:0e:4c:95:b4:5e:
3a:6e:d4:6a:87:89:e2:3e:48:0d:41:77:4f:68:59:a7:91:36:
b7:c7:69:10:f2:51:46:d5:af:d1:a2:dc:9f:ee:37:7c:64:6a:
58:a3:14:af:5c:ea:6c:47:63:4c:43:0c:3c:18:66:33:c5:9a:
cc:21:e2:ee:f1:73:10:63:43:e4:d4:5d:09:e6:24:fc:76:79:
dc:85:ee:61:a8:44:45:ff:2f:aa:7c:26:dd:f6:d7:5d:5a:17:
a0:9b:a3:bf:4e:af:44:9c:dd:c5:71:97:9f:32:4c:95:c5:eb:
6b:45:b9:fa:e3:17:85:6f:17:e1:ad:4f:d4:24:04:38:6c:c6:
3c:ba:5e:bb:cf:be:91:fb:37:12:6c:43:72:9b:ba:af:7c:f2:
4a:74:8c:66:b0:6a:9e:89:14:d8:2d:33:da:5a:69:10:3f:28:
e7:74:aa:08:44:3a:1a:8d:79:b8:84:2d:3b:6c:d7:2d:62:f0:
50:cd:9f:91:78:56:89:9c:37:2e:ad:65:75:a0:08:4f:d2:1c:
f3:a8:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:29 2025 by rpki-client