Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: pPW5/8W2SGTub2ofvV1KjPG9t+K1MC3s1XrZxxo9da0=
Subject key identifier: 72:0A:9C:88:1D:F0:6A:CA:76:A3:9B:F9:26:14:92:E6:ED:4A:8E:86
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0198D583557C60AAA084229423879AD58492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 1492
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: 2suE47C0obXyLmiOgIXzRYPf+XWrhn8rYVlhYcxlJRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:7c:60:aa:a0:84:22:94:23:87:9a:d5:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=720a9c881df06aca76a39bf9261492e6ed4a8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:84:7f:98:81:0c:f8:20:80:d1:ab:fd:70:
9d:ee:37:f0:12:0a:90:c2:37:cd:44:3c:fd:23:6b:
b9:47:ee:91:ca:a9:23:84:3b:0d:39:a3:89:39:5e:
4d:71:ec:17:e0:de:53:32:84:be:5c:d5:e2:cb:b7:
58:65:13:21:b2:90:57:25:5b:98:16:00:d0:cb:32:
12:68:2a:a6:e1:40:23:7e:de:c9:0f:7f:d4:ee:a7:
73:3b:ca:80:4d:5c:cf:b3:0a:4c:ba:85:95:93:0b:
53:73:32:7c:56:53:41:74:a1:e5:b9:a9:7a:51:a1:
82:6a:91:ab:73:b0:fc:e2:26:ee:79:0e:49:3b:52:
87:03:1d:54:cb:5d:15:87:81:80:27:a8:74:75:c1:
8f:d5:24:b8:82:27:e8:4d:82:b1:cc:93:7f:e1:a5:
7a:3a:94:37:d5:d5:f6:5c:f3:6b:59:82:a1:1f:b1:
d2:61:21:1e:0f:f1:75:57:5a:e6:8a:5e:93:4c:48:
08:15:f1:dc:4d:c9:bf:da:29:69:ca:ff:2a:af:8d:
2c:c8:ca:fe:3c:89:72:29:27:b1:70:d8:f2:b6:1b:
06:0e:e9:fa:ce:a3:f0:92:23:35:dd:0c:45:46:1d:
55:3e:ad:3a:c7:ec:61:39:6f:60:e7:a0:e7:84:02:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:9C:88:1D:F0:6A:CA:76:A3:9B:F9:26:14:92:E6:ED:4A:8E:86
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:cf:18:23:97:dc:50:31:92:0a:e7:3a:7e:af:1b:21:86:be:
18:86:e4:7e:12:34:00:14:80:b3:5b:2b:e3:19:99:0c:16:38:
79:f5:5c:2a:1d:e0:e7:e3:c4:c5:05:2c:77:f1:c1:8c:fd:41:
4f:a9:ff:96:86:fc:f7:6a:e8:a2:c2:53:57:36:05:ec:9b:20:
db:d0:3d:d3:0f:82:f7:66:71:59:f0:cd:71:8f:56:75:10:ad:
ae:74:89:66:3e:d5:ce:ef:d2:0e:95:8c:48:7c:d1:63:f1:c7:
b5:9a:fd:07:d9:52:07:9a:ae:d5:70:ee:01:a0:31:7a:58:2d:
19:ca:0d:3c:d8:8a:8c:66:1e:37:94:24:50:73:fa:fc:ca:05:
df:35:76:f8:57:f3:93:8a:6f:4e:8e:ff:4c:14:9a:c8:10:28:
24:b7:bf:3d:27:21:fa:c8:ea:a9:57:74:9b:c8:15:4a:a2:e6:
d8:d7:81:5f:ca:50:b0:77:dd:17:8a:da:73:40:33:54:91:d2:
10:cd:b4:14:77:6f:85:fe:f8:e3:27:78:0c:06:f2:b0:b4:aa:
13:12:07:da:e3:5f:86:05:87:70:72:f0:b6:87:7d:13:12:ff:
56:59:54:96:cd:89:fd:62:37:57:00:9b:5c:67:5d:3b:38:c4:
c9:51:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:32 2025 by rpki-client