Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: TMnMPBNvmE0bZnvi4TLbCk4o7Vet8bSfoa33SMSr0vI=
Subject key identifier: F3:A8:9C:5F:1A:C1:A5:1B:7D:5B:9A:96:41:89:BF:EB:27:89:10:E4
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 0198D4E0C457148C6212CBD46EEB8E98C3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 06C5
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: SS0qpTLxf+N8pZRe8i4s4fSX9qeWePvAU1sDrVHOvM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c4:57:14:8c:62:12:cb:d4:6e:eb:8e:98:c3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=f3a89c5f1ac1a51b7d5b9a964189bfeb278910e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:63:47:05:db:a0:6b:37:ee:0d:4d:cb:1e:
81:99:c6:22:19:4a:4d:c4:63:2b:ef:a5:01:98:a0:
4e:a7:4a:2c:7d:99:73:93:31:41:7b:a4:d2:40:7d:
a6:24:ff:83:c7:d2:f9:ea:86:f6:ed:9b:54:e4:f0:
62:b0:e7:16:da:98:6a:4f:46:f6:90:f9:03:2b:ba:
85:3e:0c:07:55:c9:52:fb:c5:f6:a8:a6:d1:fb:b2:
3a:94:5c:ac:b0:40:dd:5d:76:29:5e:47:c8:15:dd:
48:52:a8:af:f0:b0:1c:40:0a:ac:d2:50:52:c9:1c:
11:7e:ee:82:d3:97:65:1d:31:f5:c9:81:a4:72:74:
ac:9c:9f:c6:52:44:d6:d2:fb:66:b3:0a:fb:66:ef:
75:ee:26:a1:c9:e3:cf:5b:66:6d:e1:47:84:00:56:
11:84:04:a5:28:b7:b0:f5:8c:89:d2:6c:c0:de:05:
81:f3:8a:50:a4:3b:95:9a:de:4e:7b:b3:22:fd:05:
50:bd:1e:4a:3f:95:ab:10:fc:3d:2c:1c:29:d8:d2:
c2:49:b5:25:08:ae:50:6b:55:58:c9:bc:4a:23:59:
e6:92:9e:03:86:d7:30:c1:f2:44:4a:5b:3b:91:ed:
8e:92:46:64:64:ad:f4:21:b0:4a:de:98:e0:25:9a:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:9C:5F:1A:C1:A5:1B:7D:5B:9A:96:41:89:BF:EB:27:89:10:E4
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d1:b3:67:1c:90:fc:32:29:51:c7:4b:85:f5:f5:f1:9b:c8:
02:72:df:14:1e:a4:8a:19:fd:85:2b:51:4b:96:d3:84:f9:19:
81:e5:1e:ff:41:a0:00:f2:9c:97:7d:b7:8f:24:75:e2:b5:23:
2a:b1:83:ea:9f:1a:86:7f:f7:bc:05:19:bf:aa:02:d7:66:a1:
bc:0e:e6:a3:44:fc:75:95:81:cc:4b:f2:51:24:73:e1:02:c9:
c7:16:c3:a5:62:93:97:e4:f1:49:98:7c:19:a5:e3:54:72:a3:
ca:5b:c2:fb:86:26:5c:60:16:ce:2f:54:6f:a5:a3:6e:42:ea:
e0:bd:2e:ed:0e:ae:28:c3:96:f5:5d:b0:d4:62:fb:66:25:e7:
47:df:6b:f4:e4:ba:cd:21:6a:25:fe:42:7a:d5:e8:90:65:7e:
3f:f2:e0:95:09:43:12:84:a6:9e:e1:25:e3:5b:e3:dd:69:1e:
ff:be:a9:80:c5:35:4b:ec:37:5f:9e:9b:01:49:b5:c2:85:12:
8f:9d:36:2b:ff:be:b3:d7:11:dd:be:b1:48:57:85:5a:65:c8:
b5:33:1d:0d:36:89:26:96:80:2a:4a:15:a8:ad:64:e8:52:d0:
e1:64:f2:e4:46:d9:97:86:9c:36:70:e8:c2:12:d9:d7:ed:eb:
fa:e7:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:34 2025 by rpki-client