Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: iMbgWGPixCEpeHIR9+nCGf5EEDxP8OsowaRaz9jW9U8=
Subject key identifier: 22:44:4E:C8:D5:1A:3B:2A:3B:6D:B1:DB:DE:27:E2:A2:6D:DE:2D:17
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 01984A09B96BD79BBC5BBE5FC484FEE1EC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0535
Signing time: Sun 27 Jul 2025 04:00:07 +0000
Manifest this update: Sun 27 Jul 2025 04:00:07 +0000
Manifest next update: Mon 28 Jul 2025 04:00:07 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: ulO0CrY6UaBdmFTK+o3VVobhBiPHbrP6tYvWHBX01ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b9:6b:d7:9b:bc:5b:be:5f:c4:84:fe:e1:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jul 27 04:00:07 2025 GMT
Not After : Jul 28 04:00:07 2025 GMT
Subject: CN=22444ec8d51a3b2a3b6db1dbde27e2a26dde2d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:30:1c:e1:59:60:cf:63:3b:1c:4e:7b:6f:
ea:30:56:e5:ab:8d:fc:57:dc:92:92:fc:19:d0:b1:
75:b0:99:0d:20:7e:94:bf:e3:87:70:fd:d3:61:df:
a2:a0:4e:b0:49:2e:f1:2c:03:03:49:85:4b:9a:14:
00:cd:99:0b:2e:04:a7:9c:98:53:47:af:7e:8d:95:
59:5a:f1:10:97:e8:72:85:6d:5f:49:40:60:9d:5e:
de:dd:d8:72:5d:be:2c:f3:29:e8:f7:4d:a9:37:9e:
26:bf:c7:aa:47:df:86:fd:27:42:f6:b3:6a:80:f2:
51:02:d4:d8:2b:94:c5:16:a2:d2:ee:1f:b7:63:ba:
09:b6:3e:94:c6:ed:73:83:46:4a:94:1e:28:0c:86:
a1:6a:2f:19:09:92:9e:e4:41:3f:af:3d:89:c1:30:
87:58:09:7a:f2:42:13:d0:f3:30:c4:50:66:f5:38:
20:d7:4c:75:72:cf:1b:2b:12:6d:53:27:ff:7a:bf:
08:19:18:5e:4d:35:e9:df:8c:5d:b4:55:81:40:8b:
91:49:7a:8f:0b:c7:b1:a9:48:86:15:a3:53:ed:53:
f4:b8:01:37:24:9b:bf:57:5a:95:ae:af:1f:0f:95:
19:b1:ef:39:d8:33:03:fd:2c:96:1c:8d:f7:17:72:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:44:4E:C8:D5:1A:3B:2A:3B:6D:B1:DB:DE:27:E2:A2:6D:DE:2D:17
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:68:18:b9:25:e7:a5:57:54:2a:41:2f:3d:6a:79:5f:a2:
f2:6e:5f:dc:3a:f8:3b:3f:4e:02:6f:32:ec:38:27:52:67:f1:
1e:d5:a4:2b:40:cd:5e:e5:6f:5b:b6:68:56:63:69:f4:94:48:
cd:cf:13:55:06:c5:28:2d:0e:56:f8:68:df:3c:7f:76:3e:29:
fc:fd:46:d9:d1:59:09:34:79:33:f0:af:ad:7a:40:28:cc:5f:
d7:c0:af:c4:63:53:bf:03:0a:6e:eb:96:14:37:37:de:a4:44:
8b:66:41:07:27:e3:08:6c:8a:42:31:fb:e3:f8:69:8c:a3:d2:
a9:2f:c8:fd:22:17:5a:af:57:b7:6e:e2:fb:39:fb:ca:ce:d3:
67:f7:25:10:bb:42:40:e6:7a:c3:e5:2b:6f:1a:bf:17:11:1b:
2c:12:06:a7:05:1d:35:8e:da:5a:49:f0:37:60:9d:fc:59:a1:
1b:bd:aa:0d:03:a7:98:05:0e:af:aa:d4:35:9b:1f:79:71:65:
c1:c0:f0:5e:51:5b:c3:dd:f4:57:2b:6a:b5:94:5c:cc:7f:d5:
86:61:6c:23:e5:d2:74:ce:a6:67:7f:fa:cb:b2:bc:a5:af:0f:
e8:a0:71:bf:4f:6c:2c:f4:25:d9:35:d8:34:5e:ad:77:ce:66:
53:0b:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:40:19 2025 by rpki-client