Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: o+Ybk0mqyo7fq2dggsJSoF1sskx19KrMUvETENA/vJg=
Subject key identifier: C5:54:72:48:C4:16:D8:08:96:85:7E:65:05:F4:80:97:FF:59:E3:54
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019921E7CBE6F12F025A4FD433FA09A6F138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 1340
Signing time: Sun 07 Sep 2025 02:01:03 +0000
Manifest this update: Sun 07 Sep 2025 02:01:03 +0000
Manifest next update: Mon 08 Sep 2025 02:01:03 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: YyfdOK06OqiOqO+8k5nIPGKX9XA458eRpnOSKVDmaLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:cb:e6:f1:2f:02:5a:4f:d4:33:fa:09:a6:f1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Sep 7 02:01:03 2025 GMT
Not After : Sep 8 02:01:03 2025 GMT
Subject: CN=c5547248c416d80896857e6505f48097ff59e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:32:5c:ef:26:0a:25:4f:bb:13:dc:df:a7:
bb:09:25:73:20:07:d5:7f:87:0a:b0:fd:d9:91:a9:
05:da:01:90:07:f2:71:ee:2c:06:61:d7:22:7e:6e:
ea:6e:a3:09:f2:2c:94:ab:e8:53:50:8c:7e:8d:80:
9f:28:9e:f0:05:af:68:ba:27:f0:2f:d6:76:ea:89:
32:61:ca:24:be:a3:c3:4f:da:84:d2:6a:a7:ee:4d:
83:21:c6:81:52:75:1a:fd:b6:6f:7f:54:a7:4b:50:
d6:20:92:81:36:04:89:8b:d4:62:15:d3:2e:74:de:
91:d7:23:15:ca:ec:b1:0b:55:50:f0:d6:cb:c7:dd:
a2:e2:76:0d:7c:ee:8d:98:d0:ac:73:76:e0:80:9f:
2b:4a:bb:f3:5b:55:cd:53:20:b0:d7:d0:6c:ca:5c:
3b:6c:d6:aa:9d:36:0b:71:55:80:e4:7b:1e:ed:4b:
50:76:01:cc:e4:28:55:f7:67:3e:2a:07:25:31:b0:
5d:6a:27:3f:87:4e:69:b5:d6:eb:08:08:09:ff:c1:
c4:1e:b6:05:ba:3c:68:f5:56:dc:05:f6:dc:63:60:
fb:f1:45:76:a1:91:80:cf:dc:e7:94:5d:62:45:b1:
28:6b:fd:ef:28:5e:7a:79:9e:87:c9:f4:10:ab:82:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:72:48:C4:16:D8:08:96:85:7E:65:05:F4:80:97:FF:59:E3:54
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:bb:77:b2:f9:6d:0f:a8:a4:04:d5:27:f1:a7:e5:17:73:
2c:fc:25:86:4e:f8:38:a8:c3:19:3f:ee:9f:fa:df:5c:4d:91:
c8:6f:a5:73:04:0e:88:70:6d:d7:0f:e2:54:e2:50:93:e4:c2:
d4:be:30:63:fb:e1:9d:ad:c9:f7:e1:5f:7e:63:b7:34:97:89:
63:7a:4e:bc:dc:14:39:1f:1d:24:8f:e1:13:f9:bd:32:bc:ad:
35:ed:51:b0:8d:48:1e:0b:a0:f8:1e:a2:5c:b4:d4:fb:c5:6d:
f2:f6:a8:0b:9e:fc:75:89:a2:8a:df:aa:4e:c5:fa:93:0b:6d:
3d:94:60:22:dd:dd:59:c8:45:d6:36:d0:5f:44:72:d7:50:9d:
7e:49:8b:08:67:f4:3d:9a:52:d3:0d:b6:89:68:3f:d5:5b:ef:
ea:3a:1e:93:13:a0:d6:2f:71:91:98:b7:e1:7c:ef:7c:8d:fc:
b2:92:83:32:d8:ee:48:31:73:76:35:fe:92:3c:c3:84:69:95:
6c:87:a2:9a:76:3a:df:92:55:d0:21:0e:3d:6e:60:b4:dc:5a:
9d:26:b8:3b:f8:a8:d5:b0:a0:75:3d:80:43:61:ca:a7:ff:27:
67:7a:fa:d4:41:58:7b:d6:6d:e6:42:00:07:80:a1:b9:d4:27:
43:bd:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:08 2025 by rpki-client