Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: GbyUIz+B0wXGCIjZmfG28xiR6udGXPyptipPhu0Bw0k=
Subject key identifier: 78:21:AC:A1:72:CC:86:12:6C:5F:60:E2:C2:08:A1:26:3C:E7:97:D0
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019933141016BAF6AFEF565C913CC640992C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 160E
Signing time: Wed 10 Sep 2025 10:02:56 +0000
Manifest this update: Wed 10 Sep 2025 10:02:56 +0000
Manifest next update: Thu 11 Sep 2025 10:02:56 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: CEcIPlEzYN3QgAySfOZ5cHIEs2F64ia6GyDSw3+5S5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:10:16:ba:f6:af:ef:56:5c:91:3c:c6:40:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Sep 10 10:02:56 2025 GMT
Not After : Sep 11 10:02:56 2025 GMT
Subject: CN=7821aca172cc86126c5f60e2c208a1263ce797d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:7a:e2:30:3d:91:dc:ad:fd:3d:13:1d:9c:
9b:5f:ff:ed:2a:17:3d:53:65:9d:53:5d:da:00:21:
e2:80:b9:05:7f:21:b5:09:bb:ec:9f:50:9f:71:cb:
9c:00:88:90:dc:c6:61:87:8f:2a:10:a2:24:f8:c2:
ac:28:28:72:87:d4:ab:c9:32:76:7b:60:ee:a3:6c:
4e:75:98:7d:87:7e:99:5c:82:23:9d:b8:96:63:c2:
8f:88:67:56:0b:f0:40:57:0a:1d:09:08:87:ad:c8:
84:2b:b5:35:c5:42:f4:d4:05:5f:1f:d1:51:a6:bf:
58:1a:80:5b:ba:74:40:32:98:e0:e8:26:52:0e:a9:
89:66:42:fb:c6:c1:d0:d6:d8:00:32:fc:a7:80:f2:
b8:19:27:29:54:c3:bf:0a:72:56:bf:e6:f5:d8:c6:
bc:7e:65:c9:ee:d1:c5:5f:f7:44:29:a9:74:f7:2f:
cb:f9:a6:9e:ab:dc:2b:a8:5a:26:bd:14:d6:af:a7:
11:7e:c2:cb:2f:e1:35:da:8f:8c:96:17:b7:7d:ec:
5e:a4:b1:d5:17:9d:9d:60:00:cf:71:9c:4e:b9:20:
16:f1:9c:33:97:88:fc:89:36:90:5b:12:85:99:87:
cf:85:35:57:05:57:c4:77:c2:fb:09:8a:17:cd:48:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:AC:A1:72:CC:86:12:6C:5F:60:E2:C2:08:A1:26:3C:E7:97:D0
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8a:35:ff:51:00:c3:02:8e:a6:d5:af:c4:fd:a6:e8:e1:c0:
e6:ba:d3:fc:84:ad:6d:12:4d:13:b7:8f:52:88:60:bf:a9:50:
11:e1:34:67:fc:ef:8a:f7:fd:0f:85:46:9a:2d:b1:4e:c9:b4:
3b:a9:5c:dd:a6:fd:45:fd:6b:d7:da:84:22:27:dc:34:6f:98:
5f:27:fa:b5:28:45:0b:66:6f:d1:4d:86:ef:97:13:02:d0:cf:
98:9d:cf:1b:0f:71:fe:23:01:64:f5:20:fb:4e:7f:86:d1:d9:
10:6e:1f:f3:ad:0f:63:10:09:52:63:7b:8a:f0:8b:a5:77:f2:
74:7f:38:ac:9b:23:1c:a0:f3:28:a6:0e:99:96:8c:0b:95:81:
a2:49:65:ea:8f:bd:3c:c2:92:af:37:b1:b1:e7:4b:4a:0b:70:
c9:1b:15:d0:77:1d:44:fc:aa:05:89:f9:c3:dd:ef:0b:b9:b1:
d1:09:e1:e1:b4:9c:74:2c:8d:81:d5:22:27:47:f9:12:d7:8d:
ce:ed:cf:81:6d:f2:77:5c:b8:08:e3:60:a4:b2:19:3d:05:23:
1e:95:1c:5d:42:37:c5:4e:92:74:76:35:8e:cb:a7:b5:9e:b4:
2c:b4:02:aa:26:6f:9b:85:c2:96:41:2f:1f:64:a4:9a:0a:ff:
de:f0:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:21:47 2025 by rpki-client