Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: MWLyz2HSYVPKhWM/H7Q+1Ou404WabzYUEl4H/FquIdk=
Subject key identifier: F7:6F:19:78:43:5C:82:D4:DB:13:54:4D:86:D8:AC:33:F4:3E:27:F1
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0198D5F18F302C4050CCD92563BB375842F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 14F0
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: T7UKCLrKMtTcc3+bHW3lE9izpmycgJI0TyG7ooVsfxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8f:30:2c:40:50:cc:d9:25:63:bb:37:58:42:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=f76f1978435c82d4db13544d86d8ac33f43e27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:4d:3b:eb:ef:b9:26:f1:d0:3f:b1:27:8c:
a8:ca:dc:52:99:16:c5:49:07:19:8b:26:2f:1e:6b:
2b:88:67:d6:9d:a2:a4:4e:1a:66:6e:cb:16:4d:91:
b0:35:57:ed:e7:73:75:33:98:a6:69:f1:59:6f:66:
30:03:4e:f0:c5:ed:bb:fd:bb:94:b2:44:b4:57:f9:
1c:00:cf:a4:ed:97:c1:32:99:00:5d:7d:b3:e6:9c:
70:01:04:b5:98:d8:d0:74:c3:5b:bc:8d:c4:f9:43:
6f:a3:a4:99:9e:6f:39:c1:fd:77:5f:ba:67:a2:e2:
13:20:29:86:a2:11:3e:de:69:c9:63:1b:a2:22:57:
e7:25:3b:d7:44:c3:90:06:69:b3:b6:e2:07:a6:4b:
ee:c4:da:58:0b:84:57:05:59:7c:2a:0a:35:8b:ed:
75:0b:e7:6a:4e:22:59:cb:e4:31:ed:26:13:cd:db:
0d:3a:58:6b:38:f2:11:d5:78:80:0f:0b:f7:39:70:
2c:65:56:d7:24:81:63:99:83:0d:ee:c0:39:d5:1f:
16:51:e8:98:d9:d9:87:7f:83:46:1d:0d:bf:af:75:
75:3f:d6:32:89:ab:83:3c:e6:bf:4a:43:57:3b:8f:
67:ba:33:f1:b8:1b:69:1c:37:ae:e9:8b:24:e1:e0:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:19:78:43:5C:82:D4:DB:13:54:4D:86:D8:AC:33:F4:3E:27:F1
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:96:ad:08:ab:28:51:13:55:2e:c3:f8:6c:63:60:5e:4c:
1e:3a:9f:ce:f3:db:50:9d:0c:b6:29:da:ac:a4:48:b4:02:98:
1f:ac:08:90:a1:cc:47:ce:4c:c9:d7:50:85:2c:28:ed:0e:fc:
e6:f6:c5:05:b9:c2:f0:8f:4e:42:46:34:38:00:83:db:ac:38:
84:ed:5f:c4:83:f9:25:48:4b:cd:1b:63:7d:15:c0:1b:52:06:
79:8a:05:cb:24:d0:f0:84:71:d3:62:0f:20:b0:14:fc:29:e8:
e0:2f:56:9c:de:b1:4c:cf:63:45:e8:08:d3:04:3e:dd:56:c2:
7f:d7:95:e1:df:bc:e8:01:b4:01:97:45:3b:5b:08:67:a9:d3:
2d:0a:ac:12:32:0b:20:54:fc:c9:5a:e6:b8:89:e3:1c:f3:3a:
d6:74:37:34:ad:69:d0:04:23:24:a6:78:38:14:46:c5:7a:d8:
5d:c7:77:a4:73:ce:f1:5a:e2:50:1a:5f:f7:78:fb:57:9e:30:
c5:bd:ed:93:11:fe:1b:be:29:39:76:c5:c6:3c:43:8c:3d:6e:
39:4f:69:14:a2:69:f8:01:36:7a:4b:5e:b8:dc:c0:aa:83:ff:
b4:26:14:95:ba:d5:07:80:20:8c:69:8d:bc:6b:84:57:b5:94:
ab:10:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:14 2025 by rpki-client