Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: 59zPWgBIyoXQWe394ALPhT1veS85gMcxcFxyE4ySKCU=
Subject key identifier: 95:F1:52:0B:FF:95:BF:6C:42:28:CF:AE:F5:B0:D3:1C:E1:3F:2E:74
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019950777AD1F4C1372C8F822ED346EECEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 1688
Signing time: Tue 16 Sep 2025 03:00:31 +0000
Manifest this update: Tue 16 Sep 2025 03:00:31 +0000
Manifest next update: Wed 17 Sep 2025 03:00:31 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: 544HJPQVb530fapk8xO3NYglXm+LciINeKmza5KZDpA=)
2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:77:7a:d1:f4:c1:37:2c:8f:82:2e:d3:46:ee:ce:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Sep 16 03:00:31 2025 GMT
Not After : Sep 17 03:00:31 2025 GMT
Subject: CN=95f1520bff95bf6c4228cfaef5b0d31ce13f2e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:44:f3:07:ae:a5:06:43:e2:0f:07:e0:a0:
33:a2:ba:d7:ef:fa:1c:ba:b3:0a:6c:0c:2b:3c:27:
43:68:29:45:aa:64:6d:3a:95:c2:ba:53:96:d0:2a:
cc:89:6e:16:f2:ff:0a:dd:b0:b2:56:4d:25:76:29:
08:f5:e9:c7:14:9b:47:3c:1f:24:98:ae:1c:2e:31:
51:52:bf:5a:f4:54:d8:0e:b2:b8:08:0a:84:a8:39:
09:6d:00:b2:55:36:62:e5:bb:2e:62:35:61:e4:8c:
7f:42:e1:50:c7:e3:ae:7b:2e:83:5a:f9:1e:fb:5e:
01:c5:88:ac:75:9d:98:40:cc:a4:40:4b:bb:90:9c:
17:53:3d:aa:fc:07:45:bf:47:09:ac:ec:92:9d:fe:
d4:6a:65:fa:e6:f5:97:31:dc:36:0b:d4:8e:d6:2c:
01:d0:b9:a4:f8:2e:27:a4:10:f3:31:da:75:b1:5b:
ca:d7:96:19:58:6e:b1:b4:a4:56:05:c3:ba:4b:57:
d7:12:b9:12:a1:a0:e4:b4:72:44:d2:56:72:fd:69:
cb:4e:cc:19:e8:62:dd:73:93:11:53:cc:d1:3e:32:
60:8b:56:67:a0:48:83:f2:f9:8a:7d:48:5f:4a:e6:
01:a6:22:9a:07:c7:8c:a8:4e:dc:fb:3e:1e:a3:c7:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:52:0B:FF:95:BF:6C:42:28:CF:AE:F5:B0:D3:1C:E1:3F:2E:74
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:c8:22:5d:71:b3:13:01:f9:b3:11:32:69:35:18:49:7f:
87:02:a0:f0:49:96:6b:40:92:08:89:f9:7e:7a:ef:2c:bd:aa:
1b:61:fd:0d:ef:16:c7:e7:ba:28:d0:6e:b0:a6:09:76:4a:fa:
67:1c:65:3d:90:3b:1f:23:2f:2d:82:7e:62:a1:37:10:45:5d:
3b:9a:18:ff:79:94:f0:cf:72:e0:bf:90:1b:41:6a:c9:69:d1:
c2:03:0b:30:c6:ba:47:7c:95:68:25:7c:a4:5b:3b:f7:9b:cf:
1a:28:cb:97:03:61:6f:74:d9:2c:44:1c:50:d3:e6:77:d2:31:
ac:2d:c7:7c:f2:b4:e0:83:2c:1c:9f:e8:69:bb:69:6d:6e:dd:
0b:26:0c:33:bc:9b:5b:86:23:08:46:91:ad:4f:82:8b:9a:d3:
5f:09:24:70:ba:e5:46:dc:12:ce:83:d0:ee:48:b7:0d:65:9a:
1a:65:dc:cd:f8:4c:e3:59:e4:ac:da:25:aa:c7:c1:87:13:6b:
6f:7a:88:7b:7e:a9:68:0f:2a:3c:4e:17:bb:1c:17:6f:1f:fb:
c0:80:bd:3b:c0:dc:2e:cd:ab:b9:9c:10:ab:7e:8a:cb:53:69:
65:59:7b:9d:b9:20:8a:6f:79:23:68:58:92:95:7f:f2:d7:cd:
de:52:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:33:24 2025 by rpki-client