Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: fZjJV9j8IpQ0Pn7v5EgZEgJyaNB1XAvqHYxMt1ZfCa8=
Subject key identifier: 3A:EA:22:71:EE:8D:61:6A:FD:B7:7B:5F:E8:E0:26:98:F7:51:B1:A1
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 019921E7E7A3957DA9027C7FF6D7BC40EB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0D1D
Signing time: Sun 07 Sep 2025 02:01:10 +0000
Manifest this update: Sun 07 Sep 2025 02:01:10 +0000
Manifest next update: Mon 08 Sep 2025 02:01:10 +0000
Files and hashes: 1: 6bJ9pzGrayQzzi1Bx1frRXZTu4U.roa (hash: JW64rMXWI2589EUy/wcxEf8LSB6n6UaHQQv9Lfl9lCI=)
2: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: YC28FNtWkhlgATQxWFPCiAgvwHlQ+eGLGkmZoD7/6rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e7:a3:95:7d:a9:02:7c:7f:f6:d7:bc:40:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Sep 7 02:01:10 2025 GMT
Not After : Sep 8 02:01:10 2025 GMT
Subject: CN=3aea2271ee8d616afdb77b5fe8e02698f751b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:e0:6b:23:d0:9b:ff:0c:8a:65:f5:94:bc:
4a:6e:34:2b:e2:41:b4:08:94:06:04:82:b9:7c:69:
91:86:f7:08:e0:64:18:99:16:a4:f3:43:9a:1e:45:
88:26:e5:5d:fb:5c:4d:0f:35:9f:3b:bf:31:33:ec:
82:38:e4:54:06:3e:af:47:fd:bd:90:de:ad:93:38:
d6:ca:22:7d:af:cb:c2:fb:db:b2:9c:45:91:15:27:
2d:34:0f:d4:62:ba:e0:1a:64:4c:63:17:20:62:68:
f4:c2:f3:5f:27:24:b6:a3:bb:5b:46:8a:d0:06:6f:
22:91:34:6f:9a:04:cb:db:39:0f:ed:ec:50:d3:f7:
ff:22:d4:d0:99:af:e0:f6:be:ad:86:f6:72:c9:22:
bf:a1:48:fe:8b:1b:62:9c:95:79:cd:54:84:44:2d:
ce:04:f2:f0:f6:88:b9:95:4c:7b:02:ba:56:0f:29:
a6:22:38:f4:48:4d:93:be:ec:7e:4e:4d:a6:05:e2:
2b:c0:48:10:f8:b0:f7:da:34:48:7e:a3:8b:d3:68:
fc:81:15:c9:8a:69:fb:df:d7:33:14:a5:57:1e:d5:
32:62:8a:a8:9e:9c:0f:98:05:85:5d:18:6f:91:b8:
43:16:07:d7:03:3a:9b:3c:f7:fd:6b:bf:0d:38:88:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EA:22:71:EE:8D:61:6A:FD:B7:7B:5F:E8:E0:26:98:F7:51:B1:A1
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:3c:da:b4:06:2e:be:68:39:61:18:a9:b7:fe:1d:42:c4:
6b:69:42:3c:dd:8e:f7:d1:85:98:e4:0f:d3:a6:5f:b5:a3:b9:
53:09:35:cd:a8:23:1c:b8:86:18:fb:28:9c:5c:8d:0c:30:9a:
c8:33:50:c3:e3:90:df:34:fc:82:5e:a9:c5:a6:3c:0e:24:38:
6f:80:8e:ff:12:24:58:91:34:5b:01:1a:ef:fc:ad:89:62:93:
bc:10:fa:5e:9b:db:ab:0a:ef:93:01:80:ba:9a:e7:32:2f:5a:
5f:77:6c:e1:3f:70:a1:dd:08:4b:af:e1:bb:49:5f:0e:81:eb:
4c:53:10:02:08:e9:b9:5c:fa:50:a8:75:a8:32:64:13:c4:0e:
4b:96:53:2c:50:a4:6d:30:c6:71:61:82:69:c9:d3:4f:37:1d:
9d:c3:a1:f9:1e:35:a1:57:75:d4:b6:67:a7:f3:37:df:b1:f8:
fe:82:f0:67:a5:01:12:47:ba:a9:2a:5f:36:ea:0f:bb:d0:4c:
64:5e:12:19:d1:11:34:a8:f3:b3:06:1d:9e:d9:7b:91:5a:6b:
26:72:b6:f8:14:40:67:e1:a5:66:84:56:28:e5:ce:9e:f9:d3:
9d:c9:cb:f3:e0:98:8c:ca:27:67:82:23:cc:d7:c9:e1:3d:42:
ba:b6:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:02 2025 by rpki-client