Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: Dk+dbFzGanOxNi4cu7QVjRAPNxRxRAiOdY3oFYDJgCQ=
Subject key identifier: A2:19:40:89:62:FD:2D:05:21:22:F1:20:90:B4:22:7B:B0:C9:5B:AB
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 0198D5F1907A0B145777E609B053DE418D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 135C
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: 9TVTNxZszQcTfO5KrRkcyjgJxfzM/cHkuCrLzgJp80I=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:90:7a:0b:14:57:77:e6:09:b0:53:de:41:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=a219408962fd2d052122f12090b4227bb0c95bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:ea:06:ae:1d:29:3d:25:73:76:e2:b2:3b:
8a:90:4b:84:65:4d:4e:53:82:e1:dc:94:40:b0:1b:
09:63:c1:c2:be:9a:b3:70:ba:b7:b8:73:56:c1:99:
f2:22:7e:7c:d9:60:38:b7:ae:fe:29:bd:14:f7:dc:
a6:2b:ca:3e:34:71:c3:2f:f4:a6:a3:7e:18:54:1b:
13:f3:d4:3f:c9:60:8b:61:9b:91:92:82:2b:89:1c:
8c:16:06:ee:4a:07:d5:f5:51:98:b9:f6:28:0a:ea:
54:4f:c8:36:18:d1:27:4d:83:23:a6:95:4d:e1:64:
d2:fb:18:fc:af:11:47:0c:25:40:79:e1:cb:18:d7:
35:42:12:66:87:d9:86:f5:c9:6c:df:cc:b7:d7:a0:
5a:fb:de:86:f9:1b:ee:88:93:ae:1f:50:a6:c0:e3:
21:aa:cb:2b:c0:01:4d:13:dd:33:01:44:97:8c:de:
48:d0:95:63:e2:d8:be:9b:4b:29:f1:f2:cb:87:c5:
53:ce:4c:70:18:00:3f:3b:c1:ac:ac:5b:3f:fa:83:
7c:b7:9c:5d:b4:68:43:58:55:de:5a:c9:f1:d8:14:
5b:20:4e:29:0f:c5:26:f9:4e:89:b9:02:36:e7:65:
ca:37:6d:16:36:6a:f3:b1:d7:fc:0d:8e:01:11:64:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:40:89:62:FD:2D:05:21:22:F1:20:90:B4:22:7B:B0:C9:5B:AB
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:97:92:44:97:6a:c8:cf:72:a4:6d:2c:cb:0d:74:66:b2:
0c:42:0f:5a:95:bb:16:46:68:b6:23:a7:70:90:ae:f5:2c:a1:
36:37:1a:c3:79:3c:de:c6:78:cc:55:fd:8f:94:ef:95:3d:f8:
24:7a:df:cd:82:6b:e9:33:13:3d:e6:99:d5:ce:22:f6:46:af:
03:d0:cc:e1:0a:a2:bb:6f:9d:1d:18:5f:20:88:38:77:c7:77:
bf:d9:2b:7a:1d:13:58:77:5a:16:65:30:28:2a:62:3c:04:61:
2e:0a:01:64:c0:63:56:73:dd:38:14:94:79:1f:cd:2a:db:52:
78:55:e2:45:f4:98:7f:21:87:e2:a6:fd:7f:42:fb:3b:30:c2:
ba:81:2b:d2:51:4a:70:4b:92:40:1e:d2:74:fe:42:ac:2e:71:
4d:e8:99:ba:15:07:00:ca:ad:3c:67:c7:da:2f:f0:40:9b:ad:
b1:81:c3:3d:94:44:cc:31:93:b8:9d:6a:2a:fc:84:5a:76:9e:
b9:5d:9e:43:f2:15:28:e2:97:4b:ba:7f:45:30:ce:2a:35:e9:
49:ef:a2:13:cd:92:72:c4:bb:fd:08:b3:9c:26:ca:2c:46:65:
0d:c1:33:6f:4f:25:9c:8d:a0:ef:5d:13:ec:8e:d3:92:39:79:
9a:8c:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:03 2025 by rpki-client