Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: 0ht9ap6ZFyA69IY4maADoPUrm90Hji+4LzW51psCsmI=
Subject key identifier: B2:39:F4:90:8F:6B:F2:27:16:D7:F3:70:1A:B9:9C:60:E9:8C:07:56
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019844ACBCCBC9651E39181FBA3FBF8AC371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 03:00:27 +0000
Manifest this update: Sat 26 Jul 2025 03:00:27 +0000
Manifest next update: Sun 27 Jul 2025 03:00:27 +0000
Files and hashes: 1: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
2: LOAmRNgz3AR78bC-CKjKBqCJY3M.roa (hash: xld+cbw2oRdP1v3iddUMoK+GuqeXMoAOXkKfJjjcrk8=)
3: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
4: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: faUGwpkI3RqATE0dBMqU6fbTLTSEdCkC3NPabjk7GIQ=)
5: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
6: zErY100DK7ioQox1ZzAkRJEw58A.roa (hash: 5zdCqOsn2rNGmVqhQaT7S+ghfmyDSWdx/JglPCJCIZE=)
7: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:bc:cb:c9:65:1e:39:18:1f:ba:3f:bf:8a:c3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jul 26 03:00:27 2025 GMT
Not After : Jul 27 03:00:27 2025 GMT
Subject: CN=b239f4908f6bf22716d7f3701ab99c60e98c0756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:01:ce:46:a5:3f:45:54:15:79:32:81:a2:
d3:08:24:03:d4:73:10:56:8a:7d:0c:7a:3b:02:02:
71:9c:f2:29:32:d4:a4:37:dd:ac:f9:e5:1e:cc:e7:
6c:a4:8f:e9:7b:27:88:c0:64:fe:ad:cf:19:be:c8:
a9:fb:b2:a3:55:b2:cd:cb:df:3c:4f:63:0a:16:85:
e1:ef:33:79:0d:b7:27:a3:88:6a:47:ef:97:1f:b5:
17:2f:07:f2:1d:52:69:ee:86:0e:ab:52:48:51:be:
60:18:fc:12:3f:66:38:72:5f:f7:34:40:71:c2:55:
d9:fd:47:d1:33:9c:d3:54:4c:2a:71:46:ed:b4:a6:
0a:0f:44:4d:4c:ac:ad:b6:20:39:6c:61:4d:d1:86:
9c:b1:fd:82:da:d7:cd:fd:2f:32:98:48:4b:1a:c6:
71:4b:1d:d1:fd:78:52:0e:c9:bd:32:1d:3c:2b:f6:
6f:e4:aa:a9:92:2e:d3:11:18:0d:bd:f9:8a:ae:2b:
37:6e:3b:92:19:c4:25:43:db:66:82:5c:a8:48:f3:
70:5f:32:d6:02:d3:bc:0d:df:5a:f5:ee:f1:0b:4c:
30:da:db:cc:47:b6:33:f4:c8:06:0d:f8:ed:3a:33:
10:b6:25:a3:2c:80:d2:81:96:6b:bf:3b:20:ef:33:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:39:F4:90:8F:6B:F2:27:16:D7:F3:70:1A:B9:9C:60:E9:8C:07:56
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:49:82:bd:9c:92:98:e2:c8:84:c1:4c:81:50:92:ac:83:
4f:14:db:57:b5:80:c1:1b:64:53:04:39:53:b9:36:3d:00:b9:
43:0b:e4:c8:ad:a7:6d:42:0a:60:01:7e:8d:11:ad:c9:4b:bb:
f0:21:ff:b4:34:1c:5f:ef:1d:41:0d:79:08:18:ac:56:92:2a:
47:fa:41:83:5b:df:32:26:b1:5c:9e:e1:d3:bb:41:39:dc:a0:
d5:83:6e:f8:fe:5a:5c:29:ad:d6:48:57:89:a9:09:b0:fd:34:
15:ac:8a:30:dd:08:2d:41:77:9b:ed:1d:8e:de:e3:72:34:63:
79:ee:8f:8f:2e:45:93:50:ca:02:5e:3e:98:e9:96:1e:27:ff:
f2:fc:06:c7:7a:1f:88:68:15:31:a7:07:dc:62:99:bd:bb:72:
fe:75:f8:33:5e:29:58:1d:d4:99:37:55:45:10:42:17:92:c7:
c9:01:f7:33:18:8a:e1:73:33:e4:33:e2:c6:83:c3:a5:02:84:
84:dc:2f:f2:ed:f8:79:c4:9f:18:41:7b:61:d8:13:42:b7:6b:
64:a3:21:f8:75:23:36:3c:0e:c8:5d:a9:e9:31:bb:03:40:56:
af:e4:fe:a9:ab:f5:21:5e:12:29:15:8f:06:a5:2d:04:63:bc:
41:9a:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:37:58 2025 by rpki-client