Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: XYkQkEKY9k2xljRdYOeX0URbQgc7K+06rxZst+E3VE0=
Subject key identifier: BA:73:45:21:34:24:A3:6B:18:5D:60:A5:F5:CD:2F:A5:A3:F2:62:18
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 019849D39EAC30CADBA96D1DB2CE25153A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 8wa1qCdpmm3g6F5WlDHh5Pt1fv5JpoedbzgWNdcIQVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:9e:ac:30:ca:db:a9:6d:1d:b2:ce:25:15:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=ba7345213424a36b185d60a5f5cd2fa5a3f26218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:e5:e0:eb:c6:32:e9:c5:c1:ad:b4:de:45:
87:c5:d4:e9:60:e6:49:83:bf:32:95:33:0c:b3:8b:
f8:9d:26:73:26:09:10:f6:38:69:31:f7:c6:0c:17:
3a:8a:bd:d7:21:c4:ff:46:c8:95:8f:fd:43:eb:ba:
aa:2e:f4:2e:8f:31:a1:3b:05:b6:6e:3d:3d:7f:92:
49:22:0e:3e:22:aa:02:61:9c:bc:2a:87:35:5e:b5:
92:e9:d1:7e:71:19:d7:96:54:4f:c0:ea:d4:26:9a:
08:b1:0f:71:1b:87:c0:cc:cd:23:3c:17:31:e2:f8:
84:1c:ae:06:d0:b7:b4:de:f3:98:0d:32:f4:e0:47:
b5:eb:06:e0:2f:40:36:96:3a:07:00:bc:d5:b4:95:
0d:7a:6a:bc:b1:3e:1a:85:47:95:00:37:e7:c8:6f:
65:bd:92:3b:66:a9:1c:b2:0d:bb:86:f6:6a:67:33:
3c:32:4c:78:5f:57:bf:1a:2d:0c:39:85:05:9e:07:
ec:b9:ea:42:99:16:4a:43:d8:49:e7:6c:0d:1b:9b:
32:77:37:99:98:d5:56:db:00:fc:87:19:d8:2c:b7:
31:8a:a2:16:74:18:b9:6c:7c:12:46:06:45:eb:bb:
34:ae:a1:c4:a4:06:81:f6:93:08:af:2c:26:b6:26:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:45:21:34:24:A3:6B:18:5D:60:A5:F5:CD:2F:A5:A3:F2:62:18
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:89:1f:19:a7:6b:8f:c0:ae:9e:fd:e7:f1:c4:c0:fe:d0:
e3:9f:27:30:78:25:4a:fe:4a:ba:d3:92:b2:6b:4e:8d:8d:42:
b1:22:ac:71:cb:23:39:00:7a:c6:2c:76:0e:bd:3d:22:a6:a6:
bd:13:b1:0b:fa:53:1b:ca:20:ed:22:aa:1a:48:c3:1b:c3:90:
bc:2c:b8:ca:0d:b5:31:16:1b:42:de:61:e9:b9:79:51:15:3a:
4d:62:2c:4b:26:f8:75:f5:ba:20:2e:86:a8:ba:19:a0:77:58:
47:09:ae:93:d5:7e:95:1f:9b:d0:76:1d:c0:55:3e:66:11:90:
2a:d8:cc:8c:e6:c8:1a:af:f5:6e:8e:cf:33:cc:2b:cf:5b:db:
ac:4f:d8:e5:96:eb:f6:ba:d3:5a:8c:8c:d8:28:38:5d:dd:98:
97:29:a6:15:cd:59:71:9e:31:66:bb:87:89:86:c8:20:b8:39:
21:7b:4c:6b:28:3d:31:9d:b0:eb:de:db:09:b5:49:2d:6a:22:
c9:a1:9f:09:ab:63:47:f0:96:96:cb:fd:4a:dd:5b:32:f9:de:
7a:fd:84:45:a6:05:2a:b2:f3:e9:98:b1:3d:30:74:c1:c7:7f:
91:3b:58:30:c2:5d:a0:fd:1f:c4:01:8d:67:f3:1f:5c:31:87:
92:42:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:33 2025 by rpki-client