Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: OCfzZhdtBPDqthC2V2Xeyi6YMIsKegVdZvfWoqFYtX4=
Subject key identifier: 82:1B:D1:72:8C:34:8E:D2:EE:45:A1:08:DE:9B:C0:91:6E:11:AE:96
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019845F68E66F390ACFFB6EECD7C04E91E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 083F
Signing time: Sat 26 Jul 2025 09:00:42 +0000
Manifest this update: Sat 26 Jul 2025 09:00:42 +0000
Manifest next update: Sun 27 Jul 2025 09:00:42 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: +haPYT9uCIxwDZrRrtmA/gPObGW1l16Zdt4eURrW9Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:8e:66:f3:90:ac:ff:b6:ee:cd:7c:04:e9:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jul 26 09:00:42 2025 GMT
Not After : Jul 27 09:00:42 2025 GMT
Subject: CN=821bd1728c348ed2ee45a108de9bc0916e11ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:30:d6:00:c1:71:16:24:1e:52:5c:1b:6e:
a4:36:96:3f:9c:91:ba:41:58:ee:3a:89:3b:0a:61:
1f:90:e7:ac:9d:4b:c4:80:7d:c1:69:eb:82:1c:ba:
25:90:74:0d:c4:10:28:e5:41:b5:db:8a:a9:d0:87:
82:82:a9:cb:10:96:53:fc:b3:2c:20:8d:bd:59:da:
c5:94:45:84:5e:07:e4:ed:ff:ec:c9:43:0d:a8:08:
57:1b:4d:67:ba:ec:26:ee:67:ef:cc:c2:f7:04:63:
fa:cd:3f:a8:34:7a:9e:56:13:34:41:e7:48:51:81:
ab:1f:6c:69:a5:66:88:81:f6:b8:ba:2c:00:92:e3:
09:02:30:59:05:4a:21:c7:44:63:b9:4a:50:18:c5:
04:0f:6d:b2:76:0d:d3:b9:51:03:19:ce:32:28:3b:
b1:32:99:9b:c7:61:4b:39:53:db:79:db:cc:3e:7e:
1a:04:98:4d:5f:15:e4:96:bc:22:fb:f9:b0:21:f1:
64:16:ff:56:84:28:0e:22:e0:23:e0:34:e1:94:68:
5e:1c:b3:7b:9e:f6:f5:63:c7:9b:39:6b:ce:ca:4a:
a9:e7:38:0a:34:ba:2d:61:07:8f:4c:d3:1b:74:9b:
2f:7a:33:b0:0f:29:28:8f:6d:ee:cc:aa:b9:e7:b1:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:D1:72:8C:34:8E:D2:EE:45:A1:08:DE:9B:C0:91:6E:11:AE:96
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:1b:df:aa:f4:d5:bc:1b:ce:a1:a4:42:b3:66:e4:9f:3f:
73:9d:19:07:20:7b:1a:3b:75:28:1f:13:ef:63:d0:90:74:6a:
e5:b3:85:43:b6:7c:cf:46:f6:9f:da:c4:1e:f4:56:2e:d1:58:
2a:16:45:81:37:25:81:c8:b3:1b:a2:80:b9:a6:00:42:73:ad:
e7:be:4f:51:89:ba:03:a4:bf:aa:91:00:d8:fa:b3:61:2c:e5:
8a:32:69:2c:25:c3:4f:ae:7b:ae:41:ca:9f:c5:d6:c2:5f:26:
ae:a5:98:53:2d:03:3a:d1:d9:54:8b:0b:ea:cd:12:34:35:2f:
0a:12:31:ad:32:bd:1c:45:ed:0d:6b:d6:ac:e0:53:cf:30:9d:
18:94:89:e7:81:bd:b7:4c:c6:c2:e7:4d:de:f6:49:6a:19:d4:
d1:e2:10:10:9f:8e:89:07:0e:11:3e:49:9a:68:95:c3:2c:1d:
ed:6f:e4:2b:e7:0f:f3:f3:70:90:b6:28:13:21:51:65:a3:d3:
c4:53:3e:4c:a7:05:36:f9:51:93:03:4d:59:ec:7a:98:cd:cd:
10:94:31:f1:db:da:b7:de:3a:c4:be:5f:dd:76:38:72:32:ea:
3f:32:ea:d2:65:39:1f:4a:8a:97:cb:04:91:65:3b:5d:e0:51:
7c:9d:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:28 2025 by rpki-client