Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: tzL22n8u9B1WYaoCgpyHjoDpOXqrHBCfO89d8g8CjgY=
Subject key identifier: 99:41:B5:E9:EF:74:59:DC:DD:FE:46:5F:9C:33:9D:35:6B:20:A7:F5
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 0198DA3CE39350EFF75F8455D11D9C009EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 032D
Signing time: Sun 24 Aug 2025 04:01:20 +0000
Manifest this update: Sun 24 Aug 2025 04:01:20 +0000
Manifest next update: Mon 25 Aug 2025 04:01:20 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: 3G0tDVRv/Q9G3g2oEnCr28XVepGpJQ3Zc95bF+XF1hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:3c:e3:93:50:ef:f7:5f:84:55:d1:1d:9c:00:9e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Aug 24 04:01:20 2025 GMT
Not After : Aug 25 04:01:20 2025 GMT
Subject: CN=9941b5e9ef7459dcddfe465f9c339d356b20a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:b0:73:6c:7f:ba:60:f2:23:5d:fe:6a:27:
fb:df:84:01:56:2d:03:96:c8:9e:a6:63:0f:0b:ea:
8d:bc:2c:cf:e5:77:36:ef:9b:4c:59:2a:eb:02:e6:
1e:65:48:a6:5a:ce:45:b1:44:3c:4d:c9:62:ae:4b:
c4:a8:9e:00:16:56:38:11:0a:47:f0:a7:86:76:46:
4d:1b:60:2c:19:84:a0:02:c9:90:8a:46:4b:a2:e7:
22:d6:7b:9e:f5:84:50:79:66:dc:d5:66:68:d5:89:
2b:c6:b5:1c:1f:6d:00:15:9d:bb:8d:32:58:a3:51:
29:9c:07:f3:82:4c:9f:14:ca:91:8a:e3:a9:47:ec:
e9:22:58:29:f1:f2:b0:dc:72:3e:8b:ea:e9:e6:45:
3f:60:de:a0:fd:8b:d7:e5:8e:05:b9:52:e2:8c:4a:
31:fe:90:67:20:3a:81:57:c1:d5:13:14:67:90:1f:
c1:69:a5:cb:f9:4c:95:8e:49:a3:3f:27:4a:ba:c9:
85:74:65:b9:3a:fd:3b:0d:8f:e2:cc:c8:f3:17:c3:
b0:c1:7f:39:9b:6e:9a:2f:cb:3b:87:ee:51:8f:1f:
ef:00:2f:1b:d7:15:e4:ce:04:29:06:0a:03:9c:14:
30:de:c7:47:fe:25:c2:fc:29:ac:fb:9e:d4:ec:9a:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:B5:E9:EF:74:59:DC:DD:FE:46:5F:9C:33:9D:35:6B:20:A7:F5
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:32:77:57:9f:8b:c1:99:59:e0:1c:09:a1:e4:44:0a:1b:
de:d9:8b:bc:aa:14:34:2d:87:f5:58:f1:4a:f2:5b:ca:65:ef:
85:96:a4:f3:2e:99:dc:77:ff:11:e7:be:b2:01:f1:f9:d1:fe:
58:e6:95:70:83:2e:68:d5:5b:ab:12:42:5e:6b:52:d3:2f:e8:
7b:fc:17:57:8f:25:c9:64:7d:a3:1b:05:11:83:5a:88:6b:81:
ae:bd:5f:2d:0d:57:19:e7:02:74:00:11:67:e1:97:e0:8e:ee:
c1:de:fa:9c:9f:44:95:fb:8f:9b:f2:af:0c:8d:ea:67:11:de:
6a:55:9b:1b:a8:f4:59:c5:39:9a:e5:7e:fe:09:a9:e9:ff:e8:
07:32:0f:09:09:fc:3c:ac:f8:2e:1c:d4:71:7d:5c:bc:73:46:
c9:3b:ae:b4:f8:85:ca:db:c8:4a:7b:41:c2:de:67:30:59:49:
0a:e2:bf:b2:c2:62:17:df:ac:eb:c1:20:27:79:c9:3f:89:60:
e7:a4:5a:e9:f8:e7:d5:61:37:71:17:ae:b3:e9:8a:19:36:fd:
06:8d:4c:48:b0:e3:a9:42:34:6c:11:53:ae:64:16:24:2f:e3:
81:f6:34:eb:b3:20:c8:ff:3c:92:90:a7:a0:34:9d:06:88:85:
fe:93:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:53:39 2025 by rpki-client