Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: 8wYH2Rv4arxgtg33k2OvlpVPsnLLxuecbZq0IYAaXLg=
Subject key identifier: E3:A6:AE:76:97:CE:3D:08:F8:06:6B:9F:90:15:B7:92:D8:56:C4:07
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0199239FD1221C006FB26477F40F98ECC552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: Fv0fnos++JvhjTXA8TX9Hc4ecjkcpwC2wrP2gW+5MXA=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d1:22:1c:00:6f:b2:64:77:f4:0f:98:ec:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=e3a6ae7697ce3d08f8066b9f9015b792d856c407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:88:5e:fe:67:b1:9f:0b:b6:71:2d:26:1b:
9a:76:89:65:7f:84:36:80:45:9c:c8:95:6d:44:2a:
66:dc:89:73:0b:c5:1c:29:87:45:63:ec:aa:a6:3a:
36:81:49:df:3a:6f:79:64:ca:d9:d7:38:73:1f:52:
4a:61:b6:ff:38:df:88:b4:95:dd:90:e8:52:bd:a1:
50:51:3f:0d:da:ed:c8:d2:be:3e:c0:58:7c:4b:0b:
20:79:2b:72:18:dc:1d:90:63:7e:db:8e:80:5a:7c:
a6:98:99:d0:ca:47:c9:3d:11:77:19:81:3b:4a:d1:
30:f9:8b:c9:07:c0:59:7d:51:04:43:e4:bd:a6:15:
9a:43:af:2c:4b:8d:94:62:7e:2e:b1:bb:98:41:9c:
e5:6d:82:8e:71:b6:0e:e2:72:12:84:dd:97:1e:dd:
ad:29:7e:88:37:5b:a5:b4:ee:8d:e2:07:22:51:6d:
1d:37:7e:6c:cd:4b:24:02:d5:50:c3:f4:b2:53:6d:
11:5c:f9:f7:61:05:4e:32:4f:3b:9a:38:25:7b:69:
26:57:3c:6f:e5:7e:2a:9c:4d:e6:6c:e5:ad:0b:11:
4d:42:aa:0f:11:ca:1c:84:46:fd:df:5b:f5:06:02:
28:29:a9:9b:5a:d0:56:ba:f2:90:d7:83:7d:4f:2c:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:AE:76:97:CE:3D:08:F8:06:6B:9F:90:15:B7:92:D8:56:C4:07
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:3c:3d:87:bc:33:72:49:38:80:fa:b5:1c:41:f4:8b:5e:
65:f8:73:f9:a1:3e:af:70:47:e1:11:9c:b5:96:d7:96:ce:e9:
8e:61:09:72:13:d1:de:d9:3c:6f:8c:37:49:78:ad:4e:08:e5:
c7:e2:c3:b7:42:a4:1b:df:3f:30:8b:37:e0:44:cf:ef:42:fd:
b7:2d:81:39:2d:e6:10:d8:df:2c:ce:20:84:56:83:02:f0:25:
83:1b:ae:85:88:02:75:fc:49:4e:66:9d:64:03:90:18:61:0e:
4c:a9:90:7f:0a:70:9d:f2:2b:17:b4:f8:db:31:74:a6:98:22:
1f:42:95:90:62:16:98:3c:e2:ab:2a:ab:9c:3f:f7:45:e0:95:
f4:f1:ae:f9:dc:a1:51:21:e9:61:7e:7c:93:dd:da:eb:33:2e:
0b:a8:71:80:31:55:ce:0f:9d:68:c3:93:ed:a6:26:07:da:34:
36:7d:f5:9e:f9:a2:da:09:07:b5:5a:f8:e0:2e:69:0c:0c:26:
f7:2b:dd:33:58:73:2d:4a:04:ce:79:9f:55:23:d7:1b:2a:f4:
a8:af:95:ce:6f:53:2c:0e:8f:86:ed:b1:d4:f4:70:34:56:de:
a1:c4:15:ba:08:34:a5:46:1c:83:8b:e0:36:57:62:d5:e8:11:
50:65:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:07 2025 by rpki-client