Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: FaDjNkdpD1HAkLIGE+eIsKp1YbLLroHF09r+pBBukso=
Subject key identifier: 58:EF:C3:16:EB:BB:F0:CE:D9:9B:C1:8D:5E:0C:01:5C:56:51:BF:76
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019849660F7DCC9A37719A1A97AC4BE5694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 6mpk54nX1qlqt2gFArS3Ep+iaf+HRYwnKH0mL+iso+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0f:7d:cc:9a:37:71:9a:1a:97:ac:4b:e5:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=58efc316ebbbf0ced99bc18d5e0c015c5651bf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:66:fd:fc:95:4c:93:e7:33:0a:5d:fe:68:46:
fd:c8:a2:63:ac:7c:d9:18:cb:32:3d:37:34:5f:81:
eb:8d:ca:be:d1:42:30:78:76:57:19:9a:61:da:70:
a2:e8:38:43:00:ba:16:28:0d:00:03:28:46:54:68:
c4:96:fc:c9:02:4b:9e:2f:fa:5c:0f:47:8c:67:e8:
45:52:b8:64:19:0f:c6:17:a8:06:71:36:0f:4f:48:
53:ac:67:6c:1c:2a:47:71:61:e0:7c:ea:72:c7:14:
56:4b:2d:da:71:46:f2:07:c6:e2:21:c4:dd:46:13:
1a:59:b5:45:6c:87:43:81:1c:41:95:26:95:09:7c:
6d:de:6e:3d:84:e5:74:59:67:61:e0:12:e9:a6:82:
e0:67:d4:9b:d7:33:cf:ad:3d:12:c9:33:b9:d5:39:
ae:66:1a:bb:24:fa:b5:63:9d:9c:e3:c1:bd:1c:95:
65:d7:c7:dc:9b:fc:b1:ef:a4:d3:ed:34:b8:b5:6f:
6a:a4:13:82:7a:86:52:5b:a4:d8:83:63:fd:5f:e8:
d2:55:fe:50:42:63:e2:ca:2d:dc:a3:63:3b:23:57:
e8:7d:a9:e8:66:2d:9c:dc:05:da:36:9c:7b:f9:95:
04:df:ad:b9:b1:60:62:bf:d0:81:79:8a:d3:3d:e9:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:C3:16:EB:BB:F0:CE:D9:9B:C1:8D:5E:0C:01:5C:56:51:BF:76
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d6:80:fa:3d:1d:0f:f8:c4:ff:0e:92:04:20:53:4e:0c:e9:
cb:27:67:4c:12:74:47:97:c0:2a:6e:fa:ff:85:cc:0a:c4:66:
8e:7a:a9:4e:ee:a3:8a:79:42:53:da:1c:51:84:f3:83:b4:79:
f1:b7:45:68:b5:5c:92:42:c2:76:80:f7:c5:c7:46:d0:0a:b5:
0d:e8:0c:63:59:04:52:a1:e4:80:d0:00:d1:a6:04:4f:ee:02:
fe:5f:11:b4:6e:08:8d:31:b3:4b:42:81:75:d3:1b:02:ae:21:
6b:28:8b:2e:ad:48:cd:c9:4b:70:6d:fc:cc:aa:eb:eb:68:65:
57:c0:41:67:fd:92:c5:9f:ef:91:15:30:16:f4:4e:75:df:6d:
92:bf:b8:32:6d:66:1d:ca:08:87:ad:80:80:db:ce:0f:74:9e:
e8:60:b2:3a:ce:5f:e1:2e:60:8e:85:8f:08:dd:73:05:66:f8:
2b:02:5e:0e:ff:3e:0f:3d:46:69:09:63:c1:b8:b8:24:72:70:
71:d6:c6:86:95:f2:0b:3c:2b:1e:90:59:29:e0:5e:cf:f9:3f:
00:82:2f:06:75:63:c5:b4:fc:80:d5:8c:a5:8d:83:cc:c0:47:
dc:f2:9c:74:49:6a:a9:de:60:88:6a:d9:2c:21:ae:0b:2b:3d:
32:6f:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:15 2025 by rpki-client