Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: Ysv0HE/1evHuo1NkGjyrIemax1QG6Xki+oTZ5P9xDbs=
Subject key identifier: FC:3F:B5:86:F9:CB:11:3A:BD:26:9F:78:9E:E1:B5:25:B4:6F:B1:C2
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0199228CD0ABF8E1C74892AC53B4D50540D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 1414
Signing time: Sun 07 Sep 2025 05:01:17 +0000
Manifest this update: Sun 07 Sep 2025 05:01:17 +0000
Manifest next update: Mon 08 Sep 2025 05:01:17 +0000
Files and hashes: 1: 7Cbq0-9TtgLYQeu52VZUWksHnwE.roa (hash: JkpuN02DfnBu6RSAax0V6uNhARwqnNXw/JbyXJtDiJ8=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: P9Wmqs+VwAJK+fJnAMFGHBHPRUT6NRYTKD5dIrOvWBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d0:ab:f8:e1:c7:48:92:ac:53:b4:d5:05:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Sep 7 05:01:17 2025 GMT
Not After : Sep 8 05:01:17 2025 GMT
Subject: CN=fc3fb586f9cb113abd269f789ee1b525b46fb1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:a7:0f:48:d5:f7:f5:76:2d:a2:a7:db:bd:
ec:ed:57:4a:33:41:c7:d9:24:b4:b0:d6:22:22:24:
36:95:e7:31:be:18:c0:53:2d:18:7a:09:d4:d9:24:
bc:c8:6b:3b:ad:45:cb:c0:be:1d:a5:07:4a:71:71:
9e:2b:a9:72:dd:e4:2e:fa:fd:87:83:e5:a4:38:b0:
84:8d:25:71:15:63:d4:2a:45:a4:ac:90:b7:ed:54:
da:b7:e4:9d:33:a2:b1:57:5c:a6:52:5c:c6:e8:42:
3d:f9:95:74:6d:24:38:ae:e6:65:7e:a4:8c:40:fd:
4b:ef:0d:7b:fe:08:14:cd:fe:d2:e2:b7:76:a1:1c:
ca:2a:cf:75:5f:cd:c6:ca:e5:3d:0b:31:44:a4:21:
72:c9:6e:77:5d:a5:0b:c3:9e:69:10:9e:9a:b2:36:
ae:20:97:7d:ff:5a:e2:4e:82:ed:5c:57:59:ff:c5:
e0:03:2d:22:a3:c8:16:72:d5:4c:21:7e:28:63:9c:
14:d5:b1:54:b5:a3:d4:f2:6f:75:6e:99:6d:3f:16:
d2:d0:29:ab:2c:ae:b6:6f:57:28:b3:c4:28:1f:87:
8e:9b:47:4e:fd:0d:f5:26:01:d6:c1:82:94:14:81:
b6:cf:2b:ff:ca:74:05:27:71:26:21:ed:90:d6:64:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:B5:86:F9:CB:11:3A:BD:26:9F:78:9E:E1:B5:25:B4:6F:B1:C2
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:83:f0:d5:ea:80:7b:81:3d:c0:9f:f3:fe:30:a7:df:21:
48:9c:69:49:40:41:f1:3f:1c:6c:d3:44:74:a1:87:8f:53:4a:
1e:a0:97:c4:6d:2f:5e:9e:b5:77:fc:e7:1f:92:2d:2f:91:81:
5f:95:fb:7a:43:b5:11:a8:82:3f:3c:f6:0b:02:cd:12:40:ef:
c3:4e:89:66:8d:18:1a:7a:0e:83:a7:a2:5c:c5:e9:aa:ef:d6:
4d:51:44:7f:96:ee:76:35:2c:53:ca:f5:ca:ed:6d:f3:4f:dd:
5c:c3:f7:a5:ca:12:ed:c7:99:39:ff:cc:ae:95:ed:aa:32:4b:
a0:10:cb:00:d8:b3:7a:d4:d7:21:12:9e:61:f5:9c:12:c8:00:
fd:b5:7a:d4:c3:50:61:e5:84:33:27:53:60:68:dc:b7:e4:7c:
ae:4a:61:3c:99:f7:46:3e:51:6e:0d:90:61:9f:11:8b:29:0a:
05:62:a7:31:9b:9d:bb:a9:f3:65:80:33:64:05:c7:6f:c8:fb:
2c:44:6a:c1:a8:c4:6c:7f:a6:54:7a:49:b1:9b:91:27:28:52:
df:de:2f:97:5f:e4:4b:04:fe:fb:a8:64:76:a6:11:4b:bf:33:
75:06:4b:d3:7d:9c:61:5d:7e:b6:ac:de:48:17:b3:d1:51:33:
f3:65:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:05 2025 by rpki-client