Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: g/RrglhOzNchrYNAW9VPcAA1wWQ4TcXcl0nJOlIwABo=
Subject key identifier: C1:96:DE:67:7E:76:42:15:A2:9E:A7:C0:DB:B8:5C:F3:AE:C1:3F:E7
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019842196358083E6342CC5ADD242427BF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 13A0
Signing time: Fri 25 Jul 2025 15:00:16 +0000
Manifest this update: Fri 25 Jul 2025 15:00:16 +0000
Manifest next update: Sat 26 Jul 2025 15:00:16 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: ScRGKr70qU/rhWPrW78y/CX1VPrbZtkJ8/CNXtBcpBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:63:58:08:3e:63:42:cc:5a:dd:24:24:27:bf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jul 25 15:00:16 2025 GMT
Not After : Jul 26 15:00:16 2025 GMT
Subject: CN=c196de677e764215a29ea7c0dbb85cf3aec13fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:fc:f8:a0:23:4d:44:63:ff:a5:4d:8b:dd:
34:e6:42:48:4b:a0:16:cd:fe:e0:0e:56:9a:8a:56:
62:8c:2c:ea:80:d3:94:9f:8c:ed:ee:28:91:36:0f:
f6:17:f0:9c:81:04:b3:55:3d:3b:b1:3d:a0:e3:28:
4c:55:3a:88:b9:6c:a6:94:e6:99:c0:87:fd:a9:5f:
32:d2:79:64:56:16:dc:2c:99:71:89:be:2c:c9:49:
37:81:ac:60:a0:67:f3:f7:93:7b:1b:01:97:e7:87:
c9:d5:9e:07:45:54:fa:f0:4a:b6:a9:ee:e8:ce:29:
ef:14:95:78:6e:5c:8a:85:b9:ec:c3:f4:c9:83:ef:
6d:6f:46:4f:fb:8b:c0:c3:b1:fb:94:ce:eb:c6:56:
fa:8d:bd:ec:e6:17:54:a9:cb:88:25:38:b9:70:43:
d5:b2:23:0a:92:43:ab:88:4e:b7:c7:42:ec:75:65:
ff:b4:50:46:9d:b6:84:98:08:89:2e:d6:a3:a5:5a:
0a:4f:77:6a:be:35:e6:75:d6:4f:22:3f:1d:2c:3e:
a4:82:46:33:b0:2c:ca:d8:0e:35:52:b5:6c:90:fb:
e8:a9:9b:77:7e:36:16:c1:6e:61:aa:70:2d:73:79:
b2:4a:a2:79:71:3a:c7:2c:c6:8a:8e:0c:d2:c2:11:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:DE:67:7E:76:42:15:A2:9E:A7:C0:DB:B8:5C:F3:AE:C1:3F:E7
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5a:57:65:dd:43:be:9e:86:49:a8:bb:e7:a7:07:15:8a:8a:
5a:60:28:32:79:ce:fa:55:0b:35:1b:21:f6:a3:b7:55:ae:c3:
87:45:29:57:84:be:18:f2:b2:ff:fc:7c:6e:4b:7c:94:f1:fc:
81:62:dc:9e:98:8f:aa:5b:e2:76:4d:a0:51:cc:8c:bf:93:9a:
19:d2:cd:9d:d8:b9:4d:65:8c:35:ae:2f:41:bb:f4:70:9a:bf:
53:87:22:70:1f:d4:e3:06:8e:66:e4:e1:06:a1:13:c5:fd:98:
37:21:0a:79:86:15:73:eb:d4:9d:30:41:bc:0a:f6:a7:d1:a1:
38:1a:43:61:d9:4a:ab:af:6d:31:79:3a:77:98:17:9a:40:c4:
72:c5:b1:09:f1:b0:fe:16:98:71:34:31:72:47:69:00:be:29:
07:ac:3f:77:47:75:91:5d:7b:95:39:be:2a:4d:0c:26:30:a0:
c5:38:56:4a:86:9c:e0:27:a0:8a:f9:d7:51:17:a0:e1:88:41:
ee:a9:99:79:2e:2c:4b:ba:f3:e8:8c:2e:42:d6:2b:06:52:06:
02:5b:25:49:78:ec:1f:3f:44:7f:c2:9d:93:7f:39:5a:39:ec:
db:44:a3:04:61:69:e7:99:f1:0f:15:31:ee:dd:0d:b6:4e:bd:
97:e7:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:38 2025 by rpki-client