Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: xhoJVyOWn7SuylswaNaI2LULwCukY13LUapCXVFlgV4=
Subject key identifier: E9:DB:FF:E5:C1:73:21:65:F7:26:FD:0B:AC:78:0F:E5:77:1C:9E:84
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 0198D5BBA096A83E87DA205E17C4DC6AF525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: 7oJ0H8REcv7G40jYQDMzlKBhkLq4nCF1iGQsWU3x5M4=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a0:96:a8:3e:87:da:20:5e:17:c4:dc:6a:f5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=e9dbffe5c1732165f726fd0bac780fe5771c9e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:f9:44:78:9d:9a:d8:3d:94:4e:58:1a:e7:
41:94:23:70:62:bd:5e:a5:eb:66:98:0d:fb:d9:f6:
f0:a8:b1:cc:0f:48:b1:05:72:54:2a:2c:c8:7b:97:
78:c8:d0:6d:a8:07:61:1f:93:97:d6:e3:05:2e:96:
e3:fa:5d:3f:be:3a:54:aa:be:d3:0b:83:8e:65:31:
26:5a:51:bc:b2:16:0b:03:ee:97:8b:b5:9e:b1:5f:
74:c6:f2:56:72:b1:f3:12:08:b4:86:a9:ec:29:07:
fc:1d:84:2c:98:89:18:ca:7c:00:b8:12:69:1a:94:
8c:de:4f:b1:8d:41:c0:cc:0b:3b:94:ee:35:d2:5c:
e4:3f:58:87:de:8c:42:ef:3e:9a:a8:2f:5c:48:18:
de:27:ee:eb:d9:07:9b:0b:b3:a7:74:fa:47:75:37:
91:c4:69:19:78:3c:ff:1f:bf:21:eb:84:7a:29:0f:
73:af:a1:87:4f:c0:da:f2:e1:e6:f6:42:c8:c0:03:
88:ac:7d:ed:1c:d6:4c:a3:17:ea:f6:be:da:e8:bd:
77:b4:d6:b2:d3:f2:28:ec:cf:77:cc:61:b4:15:0a:
e8:d1:f7:63:5f:4e:18:46:f0:16:2f:df:7e:3a:54:
a1:47:2c:33:0c:d9:68:a7:e2:aa:13:88:16:0b:52:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DB:FF:E5:C1:73:21:65:F7:26:FD:0B:AC:78:0F:E5:77:1C:9E:84
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:a0:8b:ec:c8:6d:07:be:56:98:b6:b5:ef:73:3d:fb:05:
f7:ac:c6:17:57:40:e2:09:eb:57:9d:cb:fc:63:ed:2a:13:94:
1c:43:ff:fe:e3:71:84:04:65:e4:09:ee:3b:90:db:07:7f:26:
70:12:5a:ef:bd:b4:a3:5c:25:47:27:a4:f9:ee:d8:2b:a8:79:
e7:7d:1d:37:b3:eb:29:45:fa:b7:90:ec:87:41:4a:3e:96:4e:
2e:a3:fc:37:06:dd:e3:45:7a:53:13:3e:79:48:e2:b9:fc:22:
7e:1c:ea:46:70:5e:5f:e9:89:07:0e:09:cc:19:08:85:a3:20:
19:e6:57:5a:76:92:11:3d:26:64:41:c0:39:fe:c7:75:62:28:
e8:b5:f9:19:72:38:fc:89:eb:dc:6b:9b:5a:b9:cb:30:83:ac:
93:d9:08:4c:fb:5f:da:e3:f7:3c:77:29:40:bd:8d:51:00:ea:
b4:62:8a:1f:af:fa:81:b9:f6:26:e2:94:33:5d:8b:67:ce:1c:
43:ea:db:23:80:0d:d4:2a:85:74:4c:68:c5:07:6d:0a:96:49:
8b:5c:b6:2e:fd:84:bc:0a:03:06:89:7f:cb:83:d6:45:c2:ad:
7b:70:12:05:dc:15:1d:d8:4d:f8:64:04:f7:60:54:93:66:f5:
38:98:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:16 2025 by rpki-client