Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: cWd5VuZng/MLotXwJ0+OCfUNwq59NVnYqLbgZYVo4Ck=
Subject key identifier: 7D:CE:41:2D:6D:70:99:1B:0C:13:CB:A0:1B:25:4E:3A:76:3F:7D:32
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 019938DDF81444409EA0ACBC53D6B5029BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 07AC
Signing time: Thu 11 Sep 2025 13:01:35 +0000
Manifest this update: Thu 11 Sep 2025 13:01:35 +0000
Manifest next update: Fri 12 Sep 2025 13:01:35 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: wesO5iyRc1LmeSLGKCAIEs8COVxrH9f+wLqIDXCbzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:dd:f8:14:44:40:9e:a0:ac:bc:53:d6:b5:02:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Sep 11 13:01:35 2025 GMT
Not After : Sep 12 13:01:35 2025 GMT
Subject: CN=7dce412d6d70991b0c13cba01b254e3a763f7d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:89:96:39:ba:e3:ff:bd:d0:60:4b:7e:eb:
bd:ec:bc:e3:3f:65:e7:ee:30:74:b1:5a:90:78:1f:
e6:97:8a:a6:01:4c:69:c5:41:a5:2a:03:67:05:01:
2f:6f:c0:05:c0:c3:33:e8:90:00:7d:97:09:7c:bc:
52:3e:1c:66:e5:03:51:97:f5:e1:d5:cd:32:2b:a3:
fa:52:0c:57:7a:1e:3a:e3:b3:ba:b7:fe:a4:47:2c:
f5:f4:f4:3f:3f:a5:39:af:22:43:aa:01:70:1f:62:
e1:28:39:36:fc:b4:a7:ce:63:3e:22:fa:4a:02:17:
42:9f:66:cb:bc:8a:15:dc:09:30:36:ea:c0:1b:90:
aa:51:0b:b2:3f:a6:a2:a7:8a:15:51:c0:f7:30:ee:
18:dc:1a:68:e3:c8:4f:a6:a7:e5:08:fd:21:c6:82:
f5:62:f1:49:75:d8:3b:55:fa:fd:64:4e:c1:3f:63:
30:fe:b9:0c:d7:83:d2:cd:5d:55:9f:71:f9:97:9f:
2b:94:72:2e:66:2c:e9:78:a3:7e:5e:69:0a:5c:b0:
c2:14:76:12:eb:8e:05:db:ad:c7:36:1a:38:91:62:
a4:dd:27:19:e3:83:4b:87:d9:da:fe:4e:77:45:4c:
d5:3a:77:2d:69:ae:15:2b:5b:a2:ff:11:fe:22:65:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:41:2D:6D:70:99:1B:0C:13:CB:A0:1B:25:4E:3A:76:3F:7D:32
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:e8:fb:36:a5:3d:a4:9e:24:4a:75:91:ce:c3:29:38:98:
16:cc:b8:87:40:a6:3c:f1:ce:55:75:53:e9:84:cd:98:af:1d:
73:6a:5d:df:62:a7:07:25:18:38:73:a4:7a:ad:1d:b1:bf:ef:
8a:7a:6c:84:86:f2:e0:42:30:f0:8e:c6:68:c3:3f:45:d6:5e:
32:a8:04:8a:09:56:48:82:e4:f4:f1:92:a4:d0:c6:b9:25:7f:
95:57:ff:7c:aa:6f:93:74:eb:6a:c7:48:27:b8:2e:d8:48:d6:
f5:ae:a7:08:4b:88:8f:2b:62:72:c5:91:3f:f8:ed:ef:0c:10:
47:86:df:ae:32:d5:fd:87:fd:7e:b2:e0:e5:6d:a5:9e:fb:f3:
f7:87:0e:b6:4b:a4:64:fa:58:3b:6c:17:71:c1:45:4c:0d:6c:
2e:a3:ef:f2:3e:f2:08:a8:b7:d2:66:49:d8:23:61:68:67:08:
da:0d:d5:ce:15:ec:98:c5:b0:f6:f0:af:4a:17:9d:b4:57:1d:
cb:b2:46:3e:39:d1:74:bd:0f:14:b1:d8:e2:2d:62:ee:ab:f0:
7c:51:d0:8c:80:a3:e8:53:39:30:e9:10:33:c8:81:1f:d9:9d:
f1:4e:83:a1:11:13:b8:66:07:27:6e:e8:ff:92:09:56:ef:c7:
61:33:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:52:41 2025 by rpki-client