Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: SO/07zdxnJ8sl1PR3kdoOBTOVaW/w4+MEstZdvtwDTU=
Subject key identifier: 7D:8A:1B:56:E6:D3:01:A1:39:A2:A5:1C:F3:21:D2:37:ED:89:08:24
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 0198D660CD0E73A40BA872B2A843B1D6027A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 160C
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: BljAT0j6d1cBfa87ialcY/JzkhZW8jPIphy+QksfQdk=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:0e:73:a4:0b:a8:72:b2:a8:43:b1:d6:02:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=7d8a1b56e6d301a139a2a51cf321d237ed890824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:1f:25:e7:86:b0:10:48:a5:e5:a7:df:44:
92:0f:dc:06:43:5b:e7:ae:e2:3f:b3:68:59:7d:46:
2f:82:1c:10:a2:0a:27:8b:85:f6:12:5a:58:71:ad:
66:3d:f2:7e:b3:dc:f5:e2:f7:9f:64:7f:48:45:6d:
ef:4c:38:1b:c7:60:ac:68:6b:04:c1:f4:03:3f:d4:
48:7f:39:df:07:84:77:93:6b:b8:85:83:04:4d:9b:
09:5e:f0:6e:33:4d:4e:3c:53:5b:5b:8d:c9:f0:2d:
06:ab:95:bb:4e:2b:8c:d0:48:b2:76:95:6a:24:4d:
d9:ae:da:2a:71:a1:f9:df:ad:fa:e6:6e:90:1c:59:
56:ef:41:94:4d:7a:e0:37:d2:c8:f2:54:33:99:84:
3a:59:80:ac:c6:de:76:d0:28:67:6e:eb:8e:5a:cc:
7d:77:34:fb:42:66:ab:d3:f3:3a:70:50:2b:1e:b5:
14:33:42:15:cd:f1:d1:8d:74:a0:1a:50:f8:4f:d7:
70:5c:7f:87:72:da:95:28:f4:f1:26:43:28:73:88:
79:e4:a2:ae:c8:ee:2f:24:9b:f6:19:ab:51:44:5c:
e9:95:5d:98:ae:7b:59:8c:60:57:ee:41:60:54:ea:
cc:f0:c4:a5:77:da:be:d6:de:15:3d:0a:5d:a2:4f:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:1B:56:E6:D3:01:A1:39:A2:A5:1C:F3:21:D2:37:ED:89:08:24
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:02:98:9a:50:97:d1:39:78:30:58:0c:f9:3b:08:de:9c:e2:
67:59:12:8d:25:f3:dc:13:38:0b:87:93:49:38:85:54:8e:b0:
c0:70:4f:10:31:e6:53:ab:03:19:d5:36:95:ce:39:a5:1f:bf:
6c:11:54:d8:f3:e2:5f:30:95:17:23:23:42:02:76:1a:03:f0:
d9:6d:11:44:86:cc:3e:59:23:34:26:84:b8:b5:34:5c:b4:e4:
f5:89:8e:fa:e7:db:9b:6e:48:db:c8:82:79:15:0f:53:81:5b:
8d:5b:49:26:7a:aa:27:48:81:cd:49:d7:3c:f8:f7:91:4e:c9:
d4:df:e7:2f:b1:33:e9:72:9d:82:7a:28:37:9b:3b:91:c1:f3:
9b:cb:c0:a1:68:c2:71:e8:a0:55:5d:5f:d9:69:45:43:f3:67:
40:73:a2:a4:b8:2a:60:46:4a:57:7a:db:46:d5:e6:54:53:63:
67:2d:a0:64:20:2f:a6:ed:89:f5:9d:fd:30:f2:f2:5e:6a:80:
67:4f:7c:99:ed:f1:25:77:27:1d:03:f6:dc:71:4a:85:96:b6:
78:ed:c4:4b:d5:98:33:4c:32:3d:e0:64:f4:82:85:98:49:af:
ff:e3:c2:4b:2b:e2:5c:4e:83:ce:e9:3d:d6:28:0b:9d:02:2a:
a0:e3:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:12 2025 by rpki-client