Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: G0SOk08zhIBuo4LKTpvphfBQFuJ8o1pSMlGHuNkp/eI=
Subject key identifier: E8:76:20:86:B6:5C:BB:02:D5:55:E3:07:77:B2:DA:BA:39:EB:96:45
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01984966A6C140DD365B1B76CF609472FF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 1277
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: 9OHP9vfGKceclqJaYPFUQ7cIbj9san7RTtmDaWRnNDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a6:c1:40:dd:36:5b:1b:76:cf:60:94:72:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=e8762086b65cbb02d555e30777b2daba39eb9645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:69:ed:1a:aa:4d:52:56:27:fa:0c:82:b4:
e2:b5:b9:03:27:e6:da:ef:eb:2b:3e:ff:3c:1a:c4:
c2:79:c3:23:e0:90:f0:3f:b3:74:10:90:ee:5a:a9:
85:30:72:02:1f:e7:43:8e:a3:71:4d:98:df:d0:92:
96:40:77:2b:47:b1:92:70:e7:e5:0e:80:13:3a:83:
b7:e8:8a:42:ad:51:70:99:c7:84:14:14:e2:76:70:
1f:6e:45:00:f8:14:ea:c9:7e:97:a6:ce:1a:0e:50:
1d:24:d2:47:57:c7:e1:6d:b1:ec:f6:e8:c2:8a:f1:
2d:d4:a7:92:ad:7d:b9:85:e0:53:8b:3d:42:1c:71:
27:27:d1:4d:b8:e7:28:ed:06:e8:ea:c3:c9:e0:fc:
b8:77:eb:31:98:87:ff:bb:55:02:ed:f3:a2:b4:5e:
cf:9b:54:c9:e2:eb:c9:53:18:0a:46:1b:de:58:57:
f3:2f:3f:b6:68:2c:61:a4:d8:06:1b:65:20:0e:e7:
7d:c2:41:24:b8:75:59:97:f6:12:03:a7:59:af:d1:
00:0f:3d:02:83:13:12:5e:8b:07:bc:82:8e:e9:ab:
7e:c5:19:c4:2c:60:cc:24:83:29:8a:14:2c:f3:af:
15:a3:9b:0a:75:73:26:ea:c5:3b:60:fe:62:c0:2f:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:20:86:B6:5C:BB:02:D5:55:E3:07:77:B2:DA:BA:39:EB:96:45
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:87:1e:11:7f:3c:af:60:b3:82:ae:86:1d:4f:06:f3:9f:
04:57:a7:3d:c5:4e:00:16:aa:ff:8a:52:1e:ed:71:5d:0d:18:
e9:f7:f9:bf:17:7d:ee:b8:15:da:90:36:0d:ad:35:42:1c:34:
68:c0:07:44:99:e9:f0:20:80:c5:ef:da:0c:e4:f7:49:18:cf:
e2:2e:74:79:20:85:0e:49:04:28:31:f5:d7:1d:cc:bd:73:c2:
20:e0:a1:d4:3d:15:7b:09:d4:30:c0:74:52:8c:09:50:d8:7c:
35:f8:f8:06:73:2d:32:68:26:43:a1:86:15:a5:77:eb:96:e5:
d6:e7:69:56:de:99:fd:ac:cd:b6:f0:49:ef:5d:13:d1:bc:c2:
3b:bd:81:bc:a5:fa:0d:a8:28:24:03:bc:0a:51:25:77:65:b0:
6c:cb:e4:36:a5:63:ba:c0:44:db:97:98:93:0e:ba:81:b7:83:
bd:25:42:c2:a1:3e:e0:99:ac:e6:8f:fd:d9:76:f2:be:1c:5a:
22:71:07:a8:30:eb:04:88:b6:d9:ef:d0:45:bd:86:be:5b:eb:
6a:75:de:4b:f5:cf:34:67:49:85:c2:c6:15:29:55:a3:88:66:
a2:12:ff:2b:c0:cc:51:6c:13:ee:75:9e:bd:5a:a9:5c:0a:0e:
17:aa:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:48:15 2025 by rpki-client