
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: pCG2eCQp8YmJtaxuY515Gw7zvvv1e62Dy24QwWFCIgE=
Subject key identifier: 43:44:5C:D4:F5:D8:D9:FC:DB:3E:C1:5E:06:BB:0E:23:5B:F5:84:1E
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 0198DAAA381FF40E7C6329E64FA09636F47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 164D
Signing time: Sun 24 Aug 2025 06:00:45 +0000
Manifest this update: Sun 24 Aug 2025 06:00:45 +0000
Manifest next update: Mon 25 Aug 2025 06:00:45 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: hqKHcIOCC/O0/YN6F680BDmsOknOKEJ3Dlap9AYk/k8=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:aa:38:1f:f4:0e:7c:63:29:e6:4f:a0:96:36:f4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Aug 24 06:00:45 2025 GMT
Not After : Aug 25 06:00:45 2025 GMT
Subject: CN=43445cd4f5d8d9fcdb3ec15e06bb0e235bf5841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:fe:dd:15:e3:b5:39:64:41:ed:1d:26:e1:
40:28:57:d4:7d:91:f5:9a:f2:a5:ca:e5:cc:e7:07:
86:43:7f:e4:fa:44:b5:e2:4b:e7:65:5b:0e:22:9b:
1a:23:ef:fc:52:0e:68:e7:52:6b:97:35:6e:fd:0f:
61:78:9f:c0:ed:cc:63:fc:34:8c:61:a9:6b:82:09:
29:6a:4d:df:fe:c3:4b:41:5f:c4:41:cd:fd:0d:a4:
72:8b:d5:21:86:32:68:d3:29:ad:c0:5f:3b:4c:7a:
9b:ca:66:40:fb:37:df:ba:c6:a2:f0:e9:15:b2:36:
62:e4:36:96:0b:4f:84:3a:5c:ae:87:4e:d0:6f:77:
30:51:bc:fc:75:c9:60:13:b4:c3:51:e1:8c:d9:14:
9e:50:5d:50:55:40:57:f6:ce:8d:6f:21:0f:09:61:
4a:1b:94:65:09:31:e1:bc:b9:68:36:e1:50:7e:1a:
c0:ab:38:d5:f5:3a:93:4b:a2:b1:b4:6c:5b:ae:ce:
60:33:e4:d7:fe:dd:60:77:3f:21:54:65:e7:af:87:
ea:ef:dc:cb:14:83:28:31:9f:96:bb:83:4c:17:15:
8a:85:63:c0:a7:90:7f:3d:f8:c8:33:bd:78:15:83:
b4:25:6c:0b:63:7e:97:08:cb:f8:c4:93:46:b8:b0:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:5C:D4:F5:D8:D9:FC:DB:3E:C1:5E:06:BB:0E:23:5B:F5:84:1E
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:2d:ea:02:9a:35:40:f0:6c:e5:11:48:fe:0a:c4:a9:85:
36:a4:b8:5f:e4:39:fa:32:d4:4e:e3:a1:91:b5:1f:2a:73:85:
df:23:23:e8:f2:b7:c1:8c:b8:25:3c:e7:f7:e2:1c:c1:22:11:
4c:b7:0d:d3:55:90:ba:89:1d:be:35:59:b0:fb:d0:6f:6d:04:
a7:31:57:41:68:12:5e:1c:38:9e:d6:c0:08:fb:7a:90:11:b8:
e8:12:98:0e:59:3d:55:73:4e:05:f3:2f:6b:b6:18:ab:d1:08:
3f:e5:35:a8:fa:81:b0:5a:d0:c0:96:f9:eb:60:31:08:fd:49:
d3:70:70:f5:e2:2d:e7:13:3e:32:69:3d:b2:1c:c3:33:13:31:
49:2b:48:b8:00:10:69:6e:7d:03:4e:da:45:28:9f:16:d1:0b:
c3:c1:93:c8:7b:5b:33:f0:58:f1:68:32:c0:2b:3e:18:70:a6:
0d:7c:cc:2c:ab:74:53:6a:bd:a7:b8:22:1b:bc:78:03:5e:2b:
66:0e:46:c1:c2:70:80:a7:ec:12:92:a8:ec:f6:f1:b8:80:1f:
4b:6c:7b:87:1f:19:0b:1e:2c:33:65:29:87:5c:60:6c:db:54:
58:ef:42:6b:8f:1f:c6:41:d9:9b:de:b2:7d:4f:69:4a:a2:39:
6f:07:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:33:14 2025 by rpki-client