Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: mOtn5/HUOggVriftvXVePBm2IGKcuQ3shWJBWAej2Po=
Subject key identifier: 9E:47:AF:8D:CE:ED:6B:12:21:BF:C6:05:26:A0:88:A7:9D:BE:9E:A2
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019927B2C6311A905A5508C998DCB733F72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1682
Signing time: Mon 08 Sep 2025 05:00:51 +0000
Manifest this update: Mon 08 Sep 2025 05:00:51 +0000
Manifest next update: Tue 09 Sep 2025 05:00:51 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: Ttwr_AOmuAJNU7xfvE7vQ7yxn68.roa (hash: DAsTgoaDez+skEZJSCYeQvPGbwIh0OkqI0SchCswLSA=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: QqwWeO/99UImQojeM0j5Dj7IGpARPo/4vascGrPYSbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:c6:31:1a:90:5a:55:08:c9:98:dc:b7:33:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Sep 8 05:00:51 2025 GMT
Not After : Sep 9 05:00:51 2025 GMT
Subject: CN=9e47af8dceed6b1221bfc60526a088a79dbe9ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:36:55:9c:76:b8:3f:60:f0:3f:7e:27:50:
13:f0:e7:28:36:66:2e:41:76:6a:a0:88:c8:b9:c8:
d9:45:dd:ba:32:3f:c6:62:a1:0d:c1:54:b5:a2:0e:
5d:72:13:7e:61:aa:e7:49:f2:b0:a2:93:26:b0:20:
7d:09:ba:11:ca:a1:87:3a:0e:77:c6:77:67:69:70:
af:53:24:e7:d8:5b:7a:e9:1b:33:2e:b4:ba:c7:23:
6b:ed:3f:97:17:10:ab:21:c5:1e:76:82:e5:e3:e6:
a4:7f:d8:57:ce:cb:d3:6a:b3:23:85:0e:d5:27:a1:
23:65:c4:69:14:23:b5:c9:a7:1d:20:d1:78:a5:9b:
2a:b8:62:93:68:62:83:ce:a1:32:db:c2:60:78:55:
a9:6b:23:a2:fe:c2:f5:5a:4e:1d:32:5d:81:fd:97:
36:e2:21:4b:62:2e:03:af:a3:8e:79:22:4d:81:d2:
3e:72:be:79:4c:b8:cc:32:00:b5:92:65:1f:49:9e:
07:5b:9c:46:e7:a5:20:4c:ff:3b:6e:bf:7b:6c:ca:
19:bc:99:d2:1a:81:17:82:ea:dd:1f:ed:55:65:2b:
55:c1:78:81:b0:72:6c:d4:17:04:5f:48:06:cb:69:
72:3d:76:0c:e1:ff:24:b8:76:0f:a9:98:f6:97:62:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:AF:8D:CE:ED:6B:12:21:BF:C6:05:26:A0:88:A7:9D:BE:9E:A2
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:36:ee:5d:36:08:80:90:56:52:a6:13:11:cf:5f:19:39:
d0:2c:d2:ec:e4:93:fc:64:bd:19:73:c0:7a:83:65:d5:4b:22:
d3:3f:a4:ee:12:e9:96:5d:39:b5:b5:50:a0:82:bf:a4:7f:f7:
1d:6b:e3:d2:f7:17:cf:8e:ad:49:66:ea:7f:9b:f6:3a:26:c2:
01:79:cc:73:0a:68:ba:67:11:82:33:b6:1d:7b:03:81:71:01:
b5:39:3a:74:bd:21:99:4d:7c:a2:a2:e4:a5:e9:08:8b:20:7d:
9b:b3:fe:ed:55:42:b2:51:b9:24:cf:c7:67:46:de:b2:08:9b:
37:bb:73:ae:30:83:20:f6:d6:33:2d:1a:d0:c7:d5:48:1b:a8:
ad:ec:87:98:b6:de:a8:2e:f7:e8:50:51:0c:cc:16:66:9a:d0:
c1:3a:e2:a3:bb:b8:46:dd:9e:4a:45:b4:bd:da:10:29:9b:77:
65:c3:02:42:fa:09:b6:35:46:8d:4c:a8:4d:e2:f2:7a:73:da:
bd:1a:ec:ec:a3:9d:af:ae:a2:4a:de:31:79:e5:21:1b:d3:8e:
d3:8a:16:00:62:28:df:a3:cf:48:bf:28:74:38:58:92:53:fa:
1b:45:b3:8f:ac:5c:08:ab:83:42:db:73:16:20:45:94:d8:b2:
24:b1:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:17:46 2025 by rpki-client