Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: v3HUIWXZUiBxspWEj2ZkqDMnMa9fc4mrNNM4C4UIt1M=
Subject key identifier: 00:98:F4:78:90:A3:21:B5:10:B1:3A:C5:83:BD:6F:4A:97:84:67:E6
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019842F592050FEA60FA52B18BDEEDC5DEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 19:00:46 +0000
Manifest this update: Fri 25 Jul 2025 19:00:46 +0000
Manifest next update: Sat 26 Jul 2025 19:00:46 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: iQ7VuKURTu1qWr92ho7LfYVYxhaBvvzqhyzA1M5iO4E=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:92:05:0f:ea:60:fa:52:b1:8b:de:ed:c5:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jul 25 19:00:46 2025 GMT
Not After : Jul 26 19:00:46 2025 GMT
Subject: CN=0098f47890a321b510b13ac583bd6f4a978467e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:72:3c:a2:64:af:7c:91:9d:2b:e8:72:f1:
a5:00:1f:9a:63:0a:4e:69:29:4c:0b:6a:6b:16:da:
90:ac:ec:a7:10:e0:71:5c:e6:19:52:80:c0:b2:33:
7d:f3:01:c2:e9:14:37:a6:d8:0f:22:f9:1c:62:4a:
50:ff:2c:3b:1a:61:d1:58:45:bd:de:6a:9a:2a:a8:
54:3e:f9:51:15:2c:2c:63:da:10:35:b9:48:c9:18:
73:4e:d2:b3:a8:c6:b2:59:90:3b:50:4c:0d:7f:06:
83:07:18:6d:09:6b:28:b2:c8:95:02:5a:79:aa:57:
27:75:04:cb:61:0e:2e:40:bf:6e:f0:12:cb:87:44:
67:d1:86:9f:fa:e2:29:58:32:66:01:3f:2c:29:62:
c0:98:6c:26:b5:0c:d4:ac:af:35:df:82:1e:ed:16:
b4:24:87:47:03:58:6c:24:1d:1f:26:07:2f:58:72:
ba:fc:04:44:93:6f:d5:a6:27:52:1e:b8:6d:a2:9c:
3d:1c:cd:dd:f0:b6:45:32:39:be:d5:be:b9:5c:61:
c4:00:c2:f3:38:c9:d6:c1:7b:0b:f3:ad:5b:25:db:
99:27:68:c7:ac:0e:d3:af:c9:69:b6:db:ca:c5:e3:
d2:12:55:40:ea:ee:85:5b:0a:d6:fd:0d:48:42:0a:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:F4:78:90:A3:21:B5:10:B1:3A:C5:83:BD:6F:4A:97:84:67:E6
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b5:f7:63:7d:3f:d7:00:75:05:a9:a7:72:20:a4:aa:82:2c:
aa:d8:10:72:cb:ab:8d:b0:62:4e:4a:89:35:ee:79:0f:de:5e:
d8:e6:8f:0d:c7:c5:44:11:ba:46:db:a1:9e:59:28:df:b9:69:
68:6b:6f:b9:1a:ef:cb:c1:fc:58:b1:b7:ed:bd:20:ba:0f:5d:
09:93:4d:5e:df:3d:ed:e3:4a:b8:59:a0:99:8b:fd:b6:d6:36:
6c:ab:9e:62:89:a6:dc:b6:08:e6:7e:d9:4c:96:2c:bf:a6:f9:
4e:86:0a:26:08:5c:6e:e6:63:ff:73:a5:e2:7c:a2:cc:86:d2:
48:ba:a8:89:19:f8:1e:9e:7d:57:75:a0:83:65:41:ec:08:78:
6c:ec:05:2e:f2:49:e4:1e:d8:f9:26:c9:88:64:da:16:78:2d:
49:4d:35:7d:f3:89:a0:51:0f:f6:9b:8b:4e:e4:92:33:af:61:
f6:0d:43:b4:89:ab:51:ff:c7:25:69:eb:70:90:b9:9e:b1:e1:
63:6e:cb:6a:0b:82:4b:8f:90:19:1d:0c:9f:b8:19:dd:f5:dd:
3f:b5:db:7d:06:bb:53:e2:e3:94:79:a9:93:ba:89:67:37:bb:
4a:3b:0a:ee:9a:93:1c:d2:bb:26:a9:c3:c0:2f:56:e6:a2:86:
80:51:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:30:40 2025 by rpki-client