Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: gmv84bp3PminzSz7WgWNKPIKUAeIzga1noAG2JoEqVk=
Subject key identifier: 0F:B1:8B:5D:77:85:3E:E2:8D:BB:56:41:F4:19:3A:58:04:72:44:2F
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 0198D6297C79C25CCA90B333FD79A160E737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: D3
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: JdQOG0R9rZrssTolC7KmQMqAl9EzKyN68zYoNHk3PYM=)
2: tVL_ENrKSssGhUZdoVpEaqnYAmo.roa (hash: scu79Aiv4+leHmZHVUYIuN/rg63h5ustfxBunlMeXj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7c:79:c2:5c:ca:90:b3:33:fd:79:a1:60:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=0fb18b5d77853ee28dbb5641f4193a580472442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:2f:ed:d7:54:3a:f1:5c:a9:e3:e0:de:5d:
5c:7a:c7:46:88:f2:bd:ca:a2:b7:ba:00:5f:8d:c9:
ee:1f:71:d5:b3:85:d1:5a:10:1e:16:7e:1d:15:c4:
10:6e:36:35:59:15:e0:8d:e0:cf:d8:c4:05:b8:0f:
5f:68:79:cb:b8:14:22:cf:cc:bd:dd:bd:e2:0f:70:
00:e2:85:4b:f4:b8:7b:7a:b1:48:91:14:41:eb:9b:
c3:f4:0c:e3:ef:52:58:79:e1:d8:89:da:56:d9:eb:
cf:11:0b:cc:49:83:bd:2f:75:c2:b5:a1:4e:8c:0b:
b7:6b:5e:0a:11:1f:e6:e4:02:14:5e:24:63:1d:2f:
30:2e:93:01:a0:24:3e:72:cf:25:69:ce:34:f3:be:
1a:ba:30:f3:c6:2a:55:24:60:24:d5:9a:fd:07:c0:
db:14:ec:c2:60:9c:9d:38:7b:fe:4a:b9:9c:51:b1:
6e:b2:a4:d4:4e:19:b4:7c:5f:30:f5:f3:ae:5e:af:
da:82:0a:01:54:45:a6:58:40:0f:6b:ad:86:a1:9c:
47:c2:27:58:a6:5d:65:c2:20:d1:72:39:71:91:fd:
22:3b:86:fb:80:18:91:ce:92:6d:f4:72:fd:9f:27:
3f:c3:d3:44:96:ee:bf:15:ae:7b:25:e8:5c:74:91:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:8B:5D:77:85:3E:E2:8D:BB:56:41:F4:19:3A:58:04:72:44:2F
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:be:6e:6f:48:87:4c:d2:1d:71:01:51:47:e6:c9:5e:ed:da:
9b:f6:cb:80:45:f5:c2:0d:87:a9:be:6c:ea:c2:f5:73:eb:fd:
ee:b4:fd:bb:ba:a1:cd:31:70:c0:47:27:56:97:dd:3a:ba:ad:
b3:da:6f:96:3a:0d:ca:18:b3:51:03:b3:e1:ff:4f:55:6b:6e:
e5:3b:a2:09:8a:25:91:ee:a3:cb:14:e5:9d:8d:f4:ff:be:55:
db:c8:21:8c:ea:70:64:53:6a:63:56:27:e0:4f:8d:7f:33:98:
8e:55:e0:91:79:c2:da:75:29:84:52:93:21:aa:e5:90:4e:d2:
2e:af:9d:d2:38:2e:db:4c:bf:89:3a:bd:0f:38:1f:82:3b:f2:
e7:cd:ee:ae:85:88:31:69:7b:aa:f0:54:59:dc:25:45:f4:ce:
9c:39:0a:02:05:17:8f:9a:fd:04:e1:02:42:13:80:05:c0:55:
ce:e2:f0:59:9a:18:60:2d:7d:41:62:3b:ac:04:9b:c6:96:5c:
bf:06:3a:e7:a1:d3:bd:18:8a:74:fc:c1:e0:d2:07:c7:37:f5:
ff:42:fa:f6:7f:a7:ae:5a:c5:90:13:14:33:dd:02:75:fc:0a:
7b:53:e2:e3:5f:ec:2f:8e:9c:64:e2:bd:14:93:b7:a0:39:47:
cc:a1:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:42 2025 by rpki-client