Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: FNBTeEs63FPS95flr2HWPS2/RlTf/YZct2oTXIcrdvQ=
Subject key identifier: 90:8E:EC:DE:86:EF:C1:FC:04:06:D7:34:3B:91:A0:F4:67:46:6B:59
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 0198D6980B3525066569E4ACE5CB268735C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 0603
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: NlxLeqc4PR6aTBSl9PLCYt0Mm8UwxnuZIdQn/zMtIqc=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0b:35:25:06:65:69:e4:ac:e5:cb:26:87:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=908eecde86efc1fc0406d7343b91a0f467466b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:6c:3d:6a:0d:25:e4:61:6a:6e:42:9f:2f:
d6:92:92:e0:d0:ea:f1:4b:6f:0c:06:45:81:ab:bf:
63:c5:93:55:5f:57:4f:17:21:bb:46:db:96:d2:a0:
17:95:44:14:b8:e0:31:13:a4:b3:3d:f1:a7:96:ec:
d9:40:ef:83:34:09:55:44:7b:73:a9:1c:cc:1f:bd:
b2:3f:21:05:4b:84:cd:69:60:2a:c0:1f:14:bc:be:
39:95:7e:12:55:4a:6b:77:5b:e4:7e:56:29:ab:bf:
81:7a:09:17:2c:f8:fa:7a:b2:3b:e4:b5:54:56:40:
92:ff:ac:0f:03:b4:f3:5d:a5:de:83:4b:c7:d6:86:
74:3e:b9:7a:1d:48:76:5d:ef:d4:ee:c6:03:6d:8c:
8f:de:cf:28:c6:ab:e5:80:28:a3:0f:a1:79:10:82:
ae:75:0b:c5:e6:22:9a:e5:5d:95:da:63:23:86:93:
7a:3c:f8:64:28:57:bf:18:db:8c:a4:ac:9d:71:e9:
89:80:fd:9c:d2:a1:92:a8:5a:80:49:ae:d6:38:8e:
a4:28:4a:df:5a:e9:5a:c7:a1:bd:3e:0b:81:44:1a:
4e:78:88:2b:a3:3c:2d:72:11:db:25:c6:4c:6d:b9:
04:1f:95:07:83:9a:07:f6:6b:dc:0d:82:3a:ee:e1:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:EC:DE:86:EF:C1:FC:04:06:D7:34:3B:91:A0:F4:67:46:6B:59
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:de:91:fb:c7:83:80:69:42:d9:88:9e:e9:13:c5:27:00:d9:
04:72:51:06:45:d9:f9:bf:1b:69:92:ed:64:a5:cc:e2:64:11:
7a:f0:22:bd:bc:4e:5e:08:9c:f0:65:d0:5c:5f:a9:8f:03:53:
81:2e:c5:5d:96:02:0d:3b:5f:fb:65:5e:66:08:a5:fd:f5:af:
c0:c7:c7:58:f4:47:78:03:ba:80:66:64:71:b1:0d:fa:21:fd:
ba:61:86:53:5d:ce:11:dc:e3:89:48:ea:24:0b:1d:4f:a0:e8:
ed:25:c5:91:1d:fe:c4:c4:cb:08:55:85:38:be:3b:93:a5:92:
ce:5a:fa:2d:01:f8:41:60:a0:ac:c6:61:bf:c9:36:20:f4:06:
6b:ab:38:7a:23:69:9a:0d:63:0b:96:80:13:c6:13:a6:f2:83:
9a:3e:4f:e4:62:c3:05:e4:f6:7f:75:7f:63:db:e3:27:39:dc:
76:6d:44:3b:ea:81:71:23:fa:78:8c:74:c6:d9:48:ae:d9:88:
76:c1:4d:2b:ac:e8:94:e9:54:16:c5:6d:1b:0a:9d:13:80:75:
1f:96:d7:ef:dd:d7:6b:59:26:d9:a6:0f:21:4f:4f:f8:76:ee:
61:51:a5:ad:ae:0c:5a:a2:bc:30:6b:a7:97:dc:36:29:a5:f4:
fe:41:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:08 2025 by rpki-client