Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: MXkbzGRyITVzdF76uH71mQ/eOiSo54pjfZ3WrRkiXbE=
Subject key identifier: 03:3A:93:D2:3E:4A:ED:76:FC:21:42:FD:77:64:43:79:40:27:48:B3
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 01984B53FE562D25C769FAAB14566DDE8A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 0C8E
Signing time: Sun 27 Jul 2025 10:00:52 +0000
Manifest this update: Sun 27 Jul 2025 10:00:52 +0000
Manifest next update: Mon 28 Jul 2025 10:00:52 +0000
Files and hashes: 1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: KFCOzoFbF3s4FFGUTPoUGsKGTRAeyc+Xpp8kH81K6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:fe:56:2d:25:c7:69:fa:ab:14:56:6d:de:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Jul 27 10:00:52 2025 GMT
Not After : Jul 28 10:00:52 2025 GMT
Subject: CN=033a93d23e4aed76fc2142fd77644379402748b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:b1:d2:78:b1:ac:3f:69:b5:6e:69:b6:8a:
ad:5a:48:b2:e4:f7:b3:99:2a:15:5b:0c:9c:24:16:
ab:34:d2:b0:06:4e:8b:2d:d1:f4:0c:74:04:22:c1:
b4:7a:c8:36:f1:78:f8:09:3c:22:31:ee:5d:9e:2b:
c3:fa:91:b4:be:83:1b:9d:d2:2a:79:05:e4:23:c5:
f7:b1:b6:3a:38:2a:dc:6a:1f:b1:fb:8d:49:90:6d:
95:36:8d:04:ee:ca:80:95:4a:5c:02:ca:d1:bb:57:
0a:31:3b:06:3e:44:ec:77:bd:d7:8d:c4:ce:4e:97:
e2:87:33:79:7e:4b:93:5f:e4:b9:03:e5:98:67:24:
5f:e0:5e:1f:74:ed:f1:d1:a4:25:1a:71:ab:98:a8:
d7:46:f6:51:ee:b0:aa:85:ab:9f:b5:42:84:81:62:
5f:90:7b:6e:6a:08:85:6b:88:14:36:da:cb:0a:d6:
c4:9c:ec:11:17:6a:00:d2:8c:a7:65:3b:0e:ef:f6:
83:e2:48:bf:41:d9:55:dc:fc:bb:ac:a6:40:aa:af:
7d:58:39:a1:a7:ba:89:f4:60:39:93:64:b7:62:ca:
bf:57:a4:9d:17:ed:87:05:d2:cc:2a:63:44:d1:65:
90:eb:3b:f6:b1:20:12:dd:7e:cc:ec:5f:f8:da:6b:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:93:D2:3E:4A:ED:76:FC:21:42:FD:77:64:43:79:40:27:48:B3
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:bf:66:d6:15:34:bc:f7:49:38:30:90:97:32:1a:6b:83:
bb:a3:c3:e4:d3:da:c0:47:32:5a:02:e8:85:f8:cd:85:aa:7d:
8a:9e:6c:5e:cf:58:ad:d3:de:fa:9b:65:f8:22:39:53:59:54:
c8:49:ed:eb:e5:6f:d3:54:42:22:1d:e8:cd:c6:96:f1:6e:91:
36:28:64:15:3d:de:cd:2c:79:ad:f8:3c:31:b3:cd:e0:b3:84:
a5:cc:3e:74:37:d0:6e:bc:14:d0:ab:42:28:69:ba:df:7a:4d:
98:7b:34:2f:75:5d:ef:2d:c2:5a:1c:c8:e8:5f:11:49:05:b9:
d8:36:60:58:de:d6:a0:1a:fc:d9:2d:81:4a:0f:23:3c:36:cc:
b1:7a:5b:e5:32:5c:bd:a5:17:c9:4a:c0:a6:82:5e:98:40:94:
5d:52:9d:b9:18:31:ea:2c:d4:7c:97:e7:aa:0d:5a:f8:6e:fd:
8f:02:d7:7a:0c:f6:e5:92:11:d5:e1:43:6e:96:f5:10:61:0d:
69:cb:ca:fe:f8:e4:ee:61:f2:4a:dc:98:a3:d2:c6:3a:45:dc:
fb:bc:e4:de:fa:ae:0b:35:b3:d2:9e:41:d8:55:50:35:b5:a2:
b5:0f:62:a8:29:24:61:5d:33:9c:49:b1:e5:57:32:c5:98:b0:
df:80:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:37 2025 by rpki-client