Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: oho/994r0XEH41gUHholumJZIjyew1xjupb82VfugVU=
Subject key identifier: 75:8E:E2:14:5B:07:76:70:ED:10:E1:64:51:1C:8F:AE:86:41:69:81
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019936EFFB4B5D5B73F3EF73950BBFFCF67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 04:02:01 +0000
Manifest this update: Thu 11 Sep 2025 04:02:01 +0000
Manifest next update: Fri 12 Sep 2025 04:02:01 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: UIfpO+YyBMysaInK0HSKFuUFJUZLiaqTA/44c8qD4cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:fb:4b:5d:5b:73:f3:ef:73:95:0b:bf:fc:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Sep 11 04:02:01 2025 GMT
Not After : Sep 12 04:02:01 2025 GMT
Subject: CN=758ee2145b077670ed10e164511c8fae86416981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:53:26:94:ef:56:be:e7:71:d6:bf:34:29:
d5:e5:84:9b:42:63:fc:4c:13:19:54:6f:ba:cb:1f:
0e:f8:76:08:68:a4:24:8c:f5:02:87:3f:89:5a:23:
c3:e5:ba:88:56:ad:2f:e5:f0:d6:2f:3a:2b:e6:64:
4d:9f:91:14:be:c9:15:66:de:de:5e:f6:9f:e4:6c:
20:06:ae:74:f2:1c:ea:7d:a7:0d:8f:28:ca:14:aa:
a7:7d:b4:2b:12:08:f4:e9:9f:e5:33:03:9d:65:50:
88:42:89:34:5b:95:53:a9:c9:59:f6:bc:3e:9a:93:
63:0f:f8:e4:9c:d4:03:72:5e:1c:92:6d:b8:ed:a7:
98:88:c5:5b:cb:47:c8:13:05:16:88:bf:b7:b2:11:
b2:a2:0e:c6:b3:ed:c4:81:15:db:80:11:95:37:4d:
0f:b1:00:61:0b:79:db:30:97:de:3c:38:3c:39:d4:
eb:a5:1d:a8:a9:6e:ca:36:7c:4e:22:f1:b8:46:66:
ea:46:72:8e:b9:d7:5e:a8:21:0a:98:20:6d:a0:01:
84:e2:a8:2c:fb:fb:28:67:5c:97:2e:4c:c2:fb:39:
64:c9:b5:08:74:66:1f:1e:f0:bf:4b:9d:f1:25:30:
f6:a7:9c:e9:60:c7:b0:9c:e0:90:90:0a:dc:c4:89:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8E:E2:14:5B:07:76:70:ED:10:E1:64:51:1C:8F:AE:86:41:69:81
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:f1:d1:a0:10:9b:d8:35:37:eb:7b:1b:59:8c:78:2a:b0:
30:72:81:9f:f0:5f:04:5b:ae:32:3c:54:ad:35:bf:a7:84:f6:
95:25:40:1f:47:67:6e:ca:70:28:50:3d:bb:49:33:91:55:12:
73:26:03:89:1f:19:46:da:40:0d:47:e8:d6:de:7a:5a:68:31:
13:eb:7a:35:40:8b:89:0a:f4:17:da:42:7e:9f:fc:7a:3d:40:
78:e3:6b:a9:72:5a:23:fa:10:49:7b:d5:95:42:3b:c9:1d:c2:
38:10:d3:d1:e1:c0:50:e0:6b:07:34:2a:05:9d:f0:c2:5d:24:
2a:03:e2:5c:c9:0c:f9:b0:ef:1c:c9:6c:09:ba:18:96:4a:b1:
0b:74:1e:c1:e0:f7:c9:b6:d1:7b:d9:62:60:a4:ef:38:75:f9:
5f:1d:c4:ce:b4:40:2f:78:44:a9:b7:1a:62:61:31:73:35:e9:
8d:48:af:d6:a8:ec:63:e2:e9:51:63:3f:81:23:8f:51:1f:6a:
3f:c2:f7:16:b0:d1:8d:6b:ce:81:f5:62:c6:53:dc:bb:e8:00:
12:3e:c9:84:de:a4:d4:2a:fc:9b:79:0e:4a:4b:78:93:6d:5a:
d6:82:02:b2:fb:5b:15:9d:6d:9d:df:77:5b:94:64:34:d0:d5:
fc:44:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:16:11 2025 by rpki-client