Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: FEPS6U+an8rDM3NH4c//5H295RksQaV2q4Ll6fGkkMU=
Subject key identifier: 93:50:4C:99:E6:07:6A:EC:E8:B2:E8:36:7D:1F:A8:2B:CE:1F:12:CF
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0198496500F6E11910820741E569B2F06AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:12 +0000
Manifest this update: Sun 27 Jul 2025 01:00:12 +0000
Manifest next update: Mon 28 Jul 2025 01:00:12 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: dHL2q43YSfginO+vz3bsYvHdYd5rbS0CL/+tYBZThCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:00:f6:e1:19:10:82:07:41:e5:69:b2:f0:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Jul 27 01:00:12 2025 GMT
Not After : Jul 28 01:00:12 2025 GMT
Subject: CN=93504c99e6076aece8b2e8367d1fa82bce1f12cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:68:fc:75:56:6d:ae:35:b6:72:08:e9:01:
2a:7b:97:4e:29:f1:39:50:a5:f1:94:01:4d:e3:77:
76:c1:10:7b:86:60:0b:b9:09:fe:fb:92:8e:7e:d6:
92:54:90:2c:54:15:45:2c:02:20:c5:f0:88:a5:a4:
ca:e8:1e:df:81:4a:e3:59:48:6f:d6:53:d4:bf:e5:
b4:56:c0:eb:a0:43:58:d2:ee:ee:8e:be:62:d7:3b:
3a:fc:f3:70:eb:fe:52:56:52:e3:de:10:9f:cc:64:
d4:2e:39:a8:09:4b:18:ba:35:cc:20:64:5d:08:a5:
71:fb:4b:fb:16:15:20:6b:ee:e0:bf:fd:25:e0:4a:
59:f8:b0:37:9f:04:0c:94:ea:5b:36:4b:f1:60:b7:
e6:2e:a4:91:9c:6a:c7:85:63:7a:a5:82:db:fe:df:
9b:9e:0b:a1:28:26:bd:8e:ad:72:38:66:fe:49:ee:
6f:59:d6:bf:24:f0:9d:b1:cf:89:73:7c:df:11:3f:
da:57:6e:42:3b:92:46:0b:f2:01:68:ae:a9:33:89:
c0:ec:53:5f:c7:bc:1f:73:5d:7b:2b:0d:0f:78:5e:
72:39:a1:ab:35:f0:19:88:d5:a2:67:13:b3:3d:b6:
d3:f6:df:1c:64:15:5a:99:f8:21:ba:5f:6b:ca:fb:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:4C:99:E6:07:6A:EC:E8:B2:E8:36:7D:1F:A8:2B:CE:1F:12:CF
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:93:0e:d1:5e:73:e0:31:23:37:93:9c:b3:97:c8:4f:09:
b9:ed:61:a7:6a:fb:bd:e8:04:ed:83:d0:de:8e:15:60:f1:71:
85:a3:bc:20:a5:73:38:b4:f5:26:86:d5:f1:e5:b3:7d:2b:63:
91:b0:9a:8d:c8:fc:0e:04:54:ae:b9:b0:cd:1b:ff:9b:78:47:
63:1a:40:b0:5b:5a:d4:dd:69:29:63:2c:b5:33:cd:c2:30:7c:
15:12:2e:68:db:96:ed:af:6f:14:f1:77:bb:7f:0b:3a:18:26:
19:86:08:b9:f9:50:d7:da:de:d5:26:cf:ec:e3:0a:17:b0:d7:
63:d2:74:2d:df:6f:35:09:b7:e9:b8:48:1c:28:aa:5d:aa:e9:
b5:6e:90:df:10:85:0e:b9:78:95:03:c3:cd:85:2a:7c:d6:ca:
c9:33:8a:1f:03:ea:bc:be:e4:14:a7:20:4b:ec:1c:40:9c:e5:
55:da:c9:5c:df:2f:ed:4d:3b:bf:10:7e:6b:02:71:6e:9d:31:
a7:08:89:b3:38:9d:7a:34:34:22:e5:d0:de:ca:50:42:72:5c:
6c:fd:88:fe:8d:8d:bd:5b:74:fe:8c:b7:93:15:52:b8:7d:73:
84:30:f6:30:59:fd:c6:b3:9b:f5:d3:5b:48:da:a6:d1:9e:70:
20:b2:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:51 2025 by rpki-client