Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: x4EHXZ67Xni1odThfZMa5VTehELH/dQz9Qrkp/K0rrQ=
Subject key identifier: A2:55:B9:A2:CF:CC:D3:D2:98:77:0C:2D:D0:B7:5A:F7:F2:34:E3:6F
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 0198496556E8599BA433AD5E7DD57B13E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 129B
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: sOduUFKe25FTTHb8EZxwZpC3Jisgz+/KyRg3gIfHv94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:56:e8:59:9b:a4:33:ad:5e:7d:d5:7b:13:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=a255b9a2cfccd3d298770c2dd0b75af7f234e36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:b8:55:64:04:5a:da:16:e1:27:52:b6:89:
a5:5b:40:fa:6f:9a:71:6b:6c:ef:0c:75:34:ea:e6:
fa:83:57:55:14:3a:cc:f0:e4:44:ce:51:2c:28:5f:
ad:ae:a9:87:48:1e:fc:e9:6c:09:ba:93:71:9b:57:
76:6f:10:19:41:8f:7d:81:e8:10:69:2e:75:46:db:
15:bb:9b:30:9e:32:7b:15:83:6f:94:c8:f7:db:95:
4a:ce:31:95:e0:6c:c1:59:81:db:d5:c1:2f:da:3f:
03:48:55:45:68:d4:a2:89:b0:6d:31:aa:f8:d9:3e:
50:42:2e:5a:62:6c:3f:65:b4:6f:c2:9f:56:8f:de:
1c:d0:b4:cc:a3:77:49:19:34:eb:67:36:67:78:06:
6e:ec:97:e0:23:c9:ba:c4:a2:85:4b:fa:3a:dc:e5:
8b:76:9e:28:af:ae:f9:f4:8b:03:83:c1:29:3e:56:
34:0c:0b:60:af:8a:03:7d:16:52:45:b4:26:5b:05:
d3:e2:0b:68:f2:23:99:da:55:29:80:b4:9a:e4:5e:
c8:fe:f4:52:d1:f0:1e:90:59:5e:6c:ba:62:45:29:
57:28:55:b2:2e:c8:c3:a7:a4:fb:04:36:d2:e2:84:
65:13:1c:9b:64:e4:85:a2:ca:2f:96:12:2a:98:04:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:B9:A2:CF:CC:D3:D2:98:77:0C:2D:D0:B7:5A:F7:F2:34:E3:6F
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:18:10:2e:0f:22:bc:09:57:20:68:e8:4b:1b:4a:2f:4c:53:
1d:50:2e:bc:4f:99:0b:35:ef:a4:8f:28:e9:71:9f:85:9e:14:
10:6b:0f:0c:bb:e9:84:3d:85:d9:61:48:93:36:79:09:82:02:
2c:98:8c:de:24:69:3c:dd:06:61:df:d5:90:be:02:bd:30:6f:
e1:95:2f:21:b1:0a:09:a9:1d:23:0a:5b:f5:81:7d:6c:ea:dd:
13:0f:5a:ce:6c:bc:5c:87:d1:99:d2:13:12:8c:fb:c8:58:f9:
4f:86:a9:64:3f:9b:97:d2:df:4b:92:8f:71:4a:25:86:24:34:
16:c0:8c:c5:5a:7e:45:25:f9:8b:00:31:8d:fc:88:e3:4c:24:
d1:52:63:67:8d:a3:20:c9:6d:6d:ad:e7:bc:a3:ed:64:15:b6:
62:4f:9b:7f:e5:e4:92:1e:c1:3c:38:13:a6:97:4e:02:42:d5:
03:60:80:a8:7b:d6:2b:86:fc:f2:e6:61:af:4d:4b:43:8d:68:
12:45:98:41:ae:f4:f8:e1:40:fa:d6:db:aa:45:7e:6b:2a:00:
bd:af:a1:3b:f1:60:02:cc:ee:c4:5c:b2:91:3b:6b:bc:11:87:
9e:e4:cd:c2:1d:23:1c:6e:0c:55:06:df:16:cc:05:d9:7c:58:
18:55:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:39 2025 by rpki-client