Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: eFKl/XoumuLyRpUBabiwL3OV5JKrscawfpjc7r73Lmc=
Subject key identifier: D6:AF:07:E7:AC:4D:CC:CF:18:58:E1:A4:5F:E1:EA:B7:0C:E6:89:2B
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019A0F3AA1EA773837B88006605B6937C1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 16EB
Signing time: Thu 23 Oct 2025 04:01:31 +0000
Manifest this update: Thu 23 Oct 2025 04:01:31 +0000
Manifest next update: Fri 24 Oct 2025 04:01:31 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: QouI86mYm39jl1rloI/Iifhv4mMrYIF0yv8neXLyoHM=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:a1:ea:77:38:37:b8:80:06:60:5b:69:37:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Oct 23 04:01:31 2025 GMT
Not After : Oct 24 04:01:31 2025 GMT
Subject: CN=d6af07e7ac4dcccf1858e1a45fe1eab70ce6892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:e6:a8:a2:89:29:b3:77:fa:f3:6e:19:0d:
9e:2b:9a:68:82:c8:94:9b:c2:a7:c1:7d:d8:e3:1b:
df:19:a0:64:3e:01:57:78:41:da:e6:52:c7:40:41:
fa:5e:8c:56:88:59:21:c2:f2:b4:a4:0e:31:01:73:
41:5f:03:d8:e5:e0:0b:1c:4c:f1:19:63:ba:68:ff:
2a:9b:77:37:ff:3a:d3:10:7c:07:fe:1f:e1:f2:d5:
e0:c2:c5:e9:e4:4d:73:35:1b:11:92:69:4e:18:6c:
6d:87:70:9c:c9:67:ed:49:d1:e0:3f:15:d3:15:ed:
95:10:db:61:cc:cd:7c:1b:b1:af:fc:ed:24:92:9b:
cb:24:9d:97:96:cf:1b:74:0d:04:6c:80:fa:09:76:
3d:dc:34:71:88:e0:d9:5d:c7:f7:d1:d3:82:64:36:
6d:c9:01:97:72:d0:e0:4a:f2:07:4d:1b:01:3d:98:
01:c3:c2:44:08:66:e5:6d:68:b6:55:b9:69:fe:6a:
9c:c7:2a:13:d4:10:be:92:af:6f:8d:ed:fd:18:8f:
0a:5e:b2:16:72:01:2a:2f:01:d5:58:5f:a4:ea:a8:
6f:83:18:05:82:3d:62:8e:de:d9:8e:a9:42:91:45:
a4:46:db:05:00:b0:53:12:de:49:94:6f:07:53:c5:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:07:E7:AC:4D:CC:CF:18:58:E1:A4:5F:E1:EA:B7:0C:E6:89:2B
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:02:36:56:b9:39:b8:6c:6e:95:31:d6:e5:6d:c4:7b:91:
6a:17:b5:28:12:18:13:a6:ec:2c:c1:fd:4a:e6:a9:01:c6:96:
33:ca:94:cc:fd:38:63:13:00:40:32:b2:f8:e1:67:52:16:80:
6c:0c:ff:5e:63:4d:72:34:d2:6d:0b:29:ba:41:18:1d:5d:38:
42:7b:c1:84:c8:85:e5:b9:d7:5a:e3:f0:15:c0:25:6c:28:af:
98:f6:3a:53:e6:b0:8d:25:29:f0:3d:79:ef:69:40:38:db:b5:
ef:d0:0b:bf:2f:c5:ce:c5:30:85:f5:81:e8:22:38:98:3d:5e:
1f:2c:fd:ba:d4:7f:5a:89:13:cf:49:95:97:fd:9d:54:8c:c2:
57:d9:9f:5d:ae:dc:b9:2d:00:af:12:9a:10:1f:fa:3e:34:89:
04:aa:50:8a:8b:b2:9d:2f:3f:de:fb:98:2e:c9:8c:b0:89:af:
ca:a8:c7:e6:ce:9e:56:6d:11:6c:f5:1f:17:68:ad:96:0e:9b:
04:4d:8d:a3:b3:09:4f:62:54:5e:8a:74:52:6b:4f:0b:a6:d0:
02:ff:79:ee:c4:0d:bd:c4:17:8a:d2:31:78:68:a6:b8:b8:5c:
7a:34:12:c8:87:d1:3b:d6:b0:09:1a:86:c6:36:51:3e:0e:1b:
7c:6a:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:17:39 2025 by rpki-client