Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: OluuMeaONmcuRSnJ+txN5GEIF7hkFr2y5E0Xjhyyem0=
Subject key identifier: BB:72:3D:3F:02:E6:4D:CD:E9:C0:4A:BD:31:55:A9:B9:7C:65:1B:A8
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01992255868DE8F1A193F4721FE61971C234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 04:00:54 +0000
Manifest this update: Sun 07 Sep 2025 04:00:54 +0000
Manifest next update: Mon 08 Sep 2025 04:00:54 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: wu5dMOlD43IpcsMZi6VZQ8F59TazklVTJtLk2IGbCRs=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:86:8d:e8:f1:a1:93:f4:72:1f:e6:19:71:c2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Sep 7 04:00:54 2025 GMT
Not After : Sep 8 04:00:54 2025 GMT
Subject: CN=bb723d3f02e64dcde9c04abd3155a9b97c651ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:f5:3b:cf:8e:04:70:5e:ad:0b:ae:87:87:
b1:5f:6c:b1:69:e2:7a:25:de:5d:6e:7b:15:bd:2d:
31:b6:74:65:e4:1a:e1:4c:85:17:37:f1:b5:18:ea:
10:b2:12:e9:73:f1:9b:f2:e2:52:da:52:e2:e6:0b:
4b:89:7f:d3:27:98:35:8a:40:4b:34:90:9c:eb:48:
53:75:b5:f3:e1:2b:b9:40:4b:7f:d1:35:c7:30:ad:
55:a0:37:a1:8a:7b:56:2e:60:b6:d4:3f:4e:bf:89:
ec:3d:c3:fc:d6:aa:c0:94:21:3c:b0:e0:63:65:92:
b0:1b:88:bb:b6:1f:dd:d8:9d:e3:e2:72:d1:6c:7b:
b8:a6:0c:3b:34:81:08:9d:90:6f:3c:8d:fc:03:d8:
e9:c8:29:84:0e:e5:65:c4:0f:73:37:f1:79:46:5b:
81:ef:61:77:35:e0:7b:d5:2e:5d:d8:64:b0:be:37:
7c:6f:a8:d7:7e:11:c9:c8:ca:c7:f1:3d:d9:11:b4:
ac:a8:6c:ae:74:93:b0:a0:69:24:57:54:f9:e9:42:
ab:7e:44:e3:4f:63:d7:6d:12:5d:d8:38:f8:20:1a:
d2:84:c3:65:e0:0a:b5:1d:d4:7c:79:fa:71:5e:a9:
16:66:2b:4d:6a:e1:9c:3d:ac:92:55:48:92:a1:be:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:3D:3F:02:E6:4D:CD:E9:C0:4A:BD:31:55:A9:B9:7C:65:1B:A8
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:d6:14:89:db:6a:cb:27:d8:b7:47:49:fa:d6:c1:b3:03:
eb:3b:e9:43:95:2b:fc:2e:69:2d:5a:f8:d8:83:c9:54:ba:a6:
53:5c:7c:13:4a:0e:cd:9b:ef:b9:be:e8:9c:b5:ae:90:2c:d4:
9f:8d:95:47:49:0a:ed:ff:c8:63:fd:72:82:35:99:26:2f:74:
4b:23:a2:07:ea:9e:c1:a4:b9:47:e4:01:54:42:fe:ee:cd:74:
e2:78:1c:7c:59:5f:2d:11:96:2d:e1:06:f6:0b:60:0e:86:eb:
84:8e:d7:26:5f:55:56:18:2e:f9:ab:e7:2a:49:02:3b:5b:7d:
61:26:00:ff:c9:2a:96:5c:4b:74:8f:f1:d8:fc:93:15:16:16:
3c:91:8b:60:1e:91:8f:1a:5c:a2:8b:f0:39:77:f0:e9:5f:dc:
49:33:1f:82:83:c8:b3:25:6f:17:64:b9:30:dc:59:fe:e0:b8:
0e:8b:a9:92:4b:f2:12:2a:b5:d6:bd:9e:9d:49:a7:74:d2:c7:
7c:9a:c8:62:66:f5:0b:ba:04:87:cd:b5:21:57:57:5a:57:d4:
90:ff:a8:2c:bd:4e:d6:b8:ae:23:67:20:54:3b:6a:f0:9b:06:
a6:da:49:1d:5b:f2:08:b5:b7:72:2b:22:1e:eb:0e:47:0e:d7:
bd:c0:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:10 2025 by rpki-client