Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier: hC6UnBlCs2c11dcqrj/WRoAfXSnWdCGT7vQwO4ftzQg=
Subject key identifier: 50:FA:A8:A1:D0:E8:15:C1:AD:44:53:E6:D4:3E:0B:80:72:99:6F:64
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 01984AE578D0844540D5CF6C6A7EED3ADFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number: 06EB
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: cCGgeXQG7w7JJ0VVtoCaqK0Nuk0.roa (hash: OWS86sPN3Xs5u+J3GeHiIwJ0UACEogG9zbUxH/qhnWU=)
2: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: 5gaLo8nwnZ8dkuVbWft+jM1EJE/0HnwIgvp05jHRr+c=)
3: x4XI86xuT3wsfzGO7m_2JB-s4p4.roa (hash: Dt7gE1TI/UXgmAj9V+d2Jv58edUR433oJyH6DVwQHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:78:d0:84:45:40:d5:cf:6c:6a:7e:ed:3a:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=50faa8a1d0e815c1ad4453e6d43e0b8072996f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:dc:82:00:dc:60:23:a3:d9:74:8f:0e:39:
b5:7f:82:11:45:65:be:af:ee:e0:ea:6f:4a:97:7c:
08:28:74:b8:29:83:9c:b2:b7:5b:f7:b7:e5:f3:09:
21:07:6f:9a:67:1b:fe:c2:a5:40:8b:6c:59:0e:ad:
66:c1:f6:3c:4f:6b:2d:2c:a8:6a:4f:7e:1f:d0:ec:
d6:39:25:66:fd:b9:16:73:f4:fb:7c:38:c3:82:bc:
a3:cb:c9:a3:83:cb:99:73:f8:83:1e:51:1b:94:ce:
6b:37:ac:07:90:a9:0b:dc:70:9d:56:79:25:97:bf:
80:ee:e9:8e:b2:dd:b1:b5:57:93:21:c8:88:72:5e:
31:18:46:bf:79:e9:51:f6:d9:0c:01:60:23:c9:da:
0b:da:76:b8:a0:7e:98:6d:a9:ae:53:9e:95:be:ad:
17:48:53:93:82:92:88:bf:a6:af:95:16:5f:3f:90:
7f:af:ca:57:e1:e1:3b:64:24:c1:7a:4e:ac:98:f6:
93:22:62:35:a9:38:8b:22:b8:a2:cf:0a:ac:8b:34:
0a:35:b8:8a:ef:a9:e9:67:e1:49:bc:8d:d2:e0:6d:
95:14:60:05:fe:11:bb:00:05:80:1c:57:ce:18:1b:
81:60:2a:04:be:fb:f4:5d:04:4c:ee:9e:5b:2a:d7:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FA:A8:A1:D0:E8:15:C1:AD:44:53:E6:D4:3E:0B:80:72:99:6F:64
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:58:b3:e5:fa:55:30:a4:b1:be:f9:9c:5c:e3:66:f7:fa:
c6:23:dd:45:09:e5:77:58:d1:5e:63:60:f3:2a:cc:27:7a:9a:
59:b3:85:cc:b4:2d:3d:1c:96:a2:71:d0:5d:98:e9:ac:1f:4f:
1b:e3:63:9a:d6:9e:58:3f:d2:55:93:c5:30:73:6e:16:69:c5:
2d:71:0d:43:bb:d5:35:d9:e5:42:6e:33:5a:90:55:74:08:79:
aa:65:e2:7a:20:23:92:c9:d0:ac:7b:eb:e0:d1:fe:ee:7f:9d:
ca:e8:26:d7:1a:b6:fe:7e:92:80:02:76:6a:01:09:c2:34:93:
9e:c4:4d:e8:0a:16:0f:77:8b:73:6e:9c:86:e6:12:2c:50:50:
c2:6e:dc:79:73:a8:70:61:64:62:89:1a:2b:4c:d6:3c:37:7d:
60:23:f6:fc:a6:9a:22:fa:fc:d8:6e:b7:6a:40:54:2e:d7:32:
45:7a:23:42:31:78:d9:e8:18:70:ae:e3:a3:b3:8b:05:0a:bf:
23:61:dc:00:46:40:6a:e2:48:8e:51:47:c8:fa:cd:31:68:15:
66:f5:b9:4b:09:54:ce:6c:2c:a8:2e:39:0d:e1:ca:89:88:3b:
41:46:a6:29:38:ea:84:d4:d7:e1:d9:d2:f3:6d:ae:ee:39:0e:
cb:7a:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:41 2025 by rpki-client