Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: MiXmckTIQgZTK/qnDKXOp3pEdFrTcwFWjz/pTRWMiEA=
Subject key identifier: 0D:B3:F0:42:FA:81:26:3E:5C:E8:97:8E:86:C0:90:57:5E:95:00:86
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 019845F61D113481E0C881D5577B8EC5DBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 09:00:13 +0000
Manifest this update: Sat 26 Jul 2025 09:00:13 +0000
Manifest next update: Sun 27 Jul 2025 09:00:13 +0000
Files and hashes: 1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: W0dpGTJH9XZZoIXzyhUPcWArD2XAlMtF8TKg2kW6Yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:1d:11:34:81:e0:c8:81:d5:57:7b:8e:c5:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Jul 26 09:00:13 2025 GMT
Not After : Jul 27 09:00:13 2025 GMT
Subject: CN=0db3f042fa81263e5ce8978e86c090575e950086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:9c:60:db:ac:e5:18:41:3d:c8:51:cb:63:
01:8d:18:56:ad:61:5f:7c:d0:25:a9:b9:53:92:de:
24:da:2e:de:41:76:08:03:a8:ba:34:bf:4f:9b:f2:
82:83:d8:9d:88:6b:49:8c:ef:63:68:82:52:c9:b3:
c0:30:87:37:66:ee:c5:f7:ef:a2:f5:f2:5b:0a:d1:
62:86:4a:f6:e2:d7:0f:7c:3b:08:1c:d7:cc:97:fe:
f8:7b:96:f9:80:74:ae:80:32:3b:0b:69:f6:7f:f4:
b4:97:ad:09:f7:7b:2d:93:d3:5c:c2:b4:2c:b3:9d:
b8:47:64:ab:fe:49:35:ae:64:14:42:96:34:3e:e7:
a2:ed:c0:96:6e:b2:05:ab:05:ee:6d:67:87:41:78:
85:92:01:f7:f7:78:1d:b8:fb:39:10:db:25:17:bc:
ab:95:35:79:db:57:df:be:7f:01:2d:d4:ad:db:29:
99:cf:a2:9b:0f:8a:71:cd:51:5c:b6:93:3d:58:2e:
0a:a2:58:bc:f4:90:cf:05:6c:fc:90:99:37:30:51:
a2:47:98:91:f9:55:b8:6b:89:41:e7:90:ec:39:4c:
0b:bb:c9:b0:c2:87:df:ac:b8:67:d8:0f:c6:5f:d6:
8b:98:15:db:24:bf:c3:69:fd:ac:54:d5:5b:9c:f7:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:F0:42:FA:81:26:3E:5C:E8:97:8E:86:C0:90:57:5E:95:00:86
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:45:7e:fa:09:d2:27:ee:76:28:d5:fb:fa:3a:86:b3:d5:91:
4e:ac:85:ac:db:07:f1:eb:cf:dc:71:a0:36:08:21:b4:81:75:
2f:c3:38:62:f7:ea:f5:53:1b:91:19:19:98:31:a9:45:86:2d:
ed:ce:15:51:2e:59:2f:f8:f1:1c:d3:16:f7:80:df:ee:70:44:
35:9e:67:cf:9d:54:b6:5b:30:ac:72:9c:ea:81:77:c9:92:d3:
3f:38:52:97:17:21:ad:f2:9f:64:4a:01:a2:95:c4:6e:c3:dd:
5f:6c:37:d0:3f:9c:26:98:de:31:56:82:08:86:17:37:66:e6:
54:8c:c4:65:fa:40:83:62:c3:05:14:ff:ab:ec:31:1a:3e:b5:
f9:e9:d6:d0:cb:08:ba:14:82:1c:89:c9:eb:e6:9a:e5:f7:6c:
a1:b9:3d:d4:0a:6f:32:df:6b:c0:d0:1f:fe:11:03:44:dd:b0:
08:aa:b9:e3:4d:59:91:e4:7b:ac:54:1b:37:49:5a:58:29:13:
c2:73:42:5a:6a:86:a3:9c:46:33:d0:ea:a8:e2:13:6a:01:c3:
dc:cd:9f:04:5a:1e:5d:38:c7:b2:c2:fc:64:f5:46:a2:c7:cd:
c8:2c:c5:d1:bd:82:4b:0d:86:61:a7:8e:57:40:19:71:60:8a:
00:cd:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:29:48 2025 by rpki-client