Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: 68sJllbV92y/CMClsH1VSd8g5BJHJF8IuKbe2Wvwixc=
Subject key identifier: AF:05:8F:22:DC:2B:AA:38:E5:3B:40:08:9E:E0:FE:15:DE:22:DA:70
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 0199356EFD5973CC4B1271A8AA1BADF59E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 11BF
Signing time: Wed 10 Sep 2025 21:01:30 +0000
Manifest this update: Wed 10 Sep 2025 21:01:30 +0000
Manifest next update: Thu 11 Sep 2025 21:01:30 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: yjtCUj+q0wfD6iXDn4EKRjJFBfGvb0FFLjszIHlH3CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:fd:59:73:cc:4b:12:71:a8:aa:1b:ad:f5:9e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Sep 10 21:01:30 2025 GMT
Not After : Sep 11 21:01:30 2025 GMT
Subject: CN=af058f22dc2baa38e53b40089ee0fe15de22da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:34:52:bd:bc:f1:86:f5:62:fc:72:a9:50:0f:
3b:6e:5f:e4:c3:ba:d7:ca:e1:f9:4d:64:3d:2b:fe:
28:cb:56:07:38:fc:80:83:31:9b:fd:d5:eb:58:a5:
4d:89:85:87:1f:59:84:71:20:82:8b:c5:32:5c:e5:
4e:97:5a:de:81:35:99:12:df:88:cf:d6:34:b8:53:
08:da:64:f9:14:10:cb:d2:14:2f:f4:b2:e0:4e:8b:
ec:1d:db:4c:2b:ea:92:94:0a:41:62:b0:16:70:81:
64:03:77:30:e1:ab:a1:fe:01:66:a0:a8:ad:fc:58:
fc:6a:29:a3:de:41:e5:e5:e2:29:d0:61:01:55:ca:
af:67:55:2f:f1:5b:48:9c:2c:64:c7:95:2d:0c:09:
b9:82:48:b0:8a:0a:fd:b3:99:60:60:ee:ee:cc:4e:
68:c1:8b:93:12:85:cd:fe:d9:a5:e6:c4:04:13:1c:
ff:31:9f:a3:54:c6:98:31:a0:67:d1:4a:88:aa:cb:
7c:0e:45:a3:6f:ca:bf:2c:eb:06:ce:4b:2f:12:62:
dc:1a:57:dc:0c:76:c9:12:ed:5b:87:36:07:cd:2a:
16:3c:97:e6:f6:bb:d7:9b:06:74:9b:b0:15:f4:3a:
44:8a:96:6a:02:63:76:3f:33:e1:4c:72:d3:25:82:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:05:8F:22:DC:2B:AA:38:E5:3B:40:08:9E:E0:FE:15:DE:22:DA:70
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:c1:55:cf:84:f8:89:d7:ec:2a:00:40:e1:ad:f4:e7:c9:
99:2e:5c:8a:35:45:10:1c:4d:21:a7:6c:53:95:af:68:ad:d9:
dc:0b:92:fb:46:62:58:3a:05:1f:9c:bc:cf:02:cf:67:18:0c:
46:45:88:3b:8d:8f:57:52:4e:5a:94:6f:8d:66:77:dd:4e:27:
b6:de:6d:5a:bc:67:a0:4c:f0:ff:13:a1:4a:83:47:1d:dd:22:
02:fa:17:b2:dd:4d:5f:4a:e9:4e:6e:dc:ee:95:43:25:9e:8f:
d0:ea:74:c7:09:9d:fd:f6:46:7f:e4:61:5f:bd:17:d0:0a:ee:
5b:5e:13:49:10:91:bc:f2:d4:bf:da:bb:a9:bd:60:97:e8:63:
04:06:de:a2:f2:c5:96:0a:b1:22:72:85:76:7f:a3:d9:59:41:
e9:92:e4:1a:1b:bd:a0:a6:8e:93:52:e9:78:96:76:48:77:e5:
ff:47:b5:45:b2:57:f5:37:43:ad:5b:b1:d7:c7:5d:4b:24:9b:
3c:01:56:22:4c:a5:8b:2f:12:d3:c4:7b:47:90:25:ef:bf:a8:
72:b0:1e:5a:c6:b7:fd:6e:39:57:ec:4b:a4:88:3d:3f:6f:0b:
a9:fd:93:a9:02:c2:67:b5:07:5a:59:08:22:fc:85:18:21:29:
6e:a9:03:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:15:06 2025 by rpki-client