Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft (raw, json)
Hash identifier: xOvFSnSzhMzOqDn/UbKqqSl0m0yp+tSQNlw80qDBWRA=
Subject key identifier: F2:A8:2A:5B:EC:2E:94:56:76:53:8E:65:EE:C3:C2:CC:AD:96:99:7E
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 0198D54E78341EF5949C1736862D3F55E939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: bdAF9viIHB5V5FhTALS-owQhcks.roa (hash: lPv9YsuyVHwxqfP/RRJpZeMDZjwRG/d34AhteS5V7Ew=)
2: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl (hash: l7FKZU5hOo+iWEc0V+hw1CFGb8xSeGx9T4Cz2ncSBss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:78:34:1e:f5:94:9c:17:36:86:2d:3f:55:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=f2a82a5bec2e945676538e65eec3c2ccad96997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:ea:59:a1:30:8d:15:98:c3:a4:79:ab:c3:
39:37:c8:a6:67:97:48:7b:8a:e1:c5:db:9a:4c:94:
6d:a1:52:2a:89:d5:c9:7a:a1:cf:2d:f2:e0:ba:cc:
4e:01:1e:30:62:f5:d4:0e:99:fd:61:7b:0b:35:ad:
49:af:cc:e1:bf:e3:3f:09:51:ff:16:b0:f8:8f:ff:
a4:5c:46:10:d2:87:e2:a1:8a:01:19:97:b7:60:0e:
b6:86:4e:23:41:23:61:86:a2:37:8a:d2:8e:a3:b1:
46:fd:81:5a:53:4d:93:b4:b2:a1:2c:34:61:fe:ec:
9a:eb:11:ed:93:a4:97:5a:2c:6b:67:50:b7:61:8c:
a9:d1:d1:50:ae:6f:e0:18:31:b6:4a:05:6d:37:ed:
61:a9:16:49:06:06:66:ba:bc:07:d7:46:c1:6b:b1:
f0:c0:a3:14:1b:cb:ff:9f:bd:97:fe:42:70:80:23:
02:99:b6:5b:2a:5f:0d:c9:45:33:c9:a1:88:31:c5:
ac:5e:16:16:1a:be:1e:23:8a:4a:c6:a8:7e:26:f4:
53:5f:2c:f4:0f:95:a9:61:bc:f1:e3:83:c7:68:e6:
18:40:d9:f8:0e:a0:3f:9a:6a:f4:a4:2d:d7:66:96:
32:e1:32:fe:5c:7c:47:c6:76:4f:09:22:4f:74:55:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:2A:5B:EC:2E:94:56:76:53:8E:65:EE:C3:C2:CC:AD:96:99:7E
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:20:af:d3:16:39:5a:3f:c9:1e:98:07:9e:5c:df:eb:ee:
01:a7:77:cb:43:93:b8:94:85:c8:72:d0:b3:bc:e5:fc:6c:e3:
aa:f8:7f:39:e5:2d:91:86:48:ef:bb:fd:00:2f:e3:82:33:b0:
ea:2d:cc:8a:ba:30:7c:6a:36:5a:82:a0:fe:7f:e0:6a:5a:96:
33:ff:8b:65:cb:ce:e6:02:d6:14:35:d4:31:3b:fb:53:11:ff:
16:af:ee:cb:a2:ff:e4:67:00:8a:4a:11:f7:8a:72:f9:e6:77:
6b:c9:0d:d5:06:39:fc:cd:74:af:2c:17:80:22:94:c7:19:fc:
b2:fb:0d:8e:42:f6:0c:55:8a:c7:3c:d0:95:ec:1e:19:61:0a:
1d:aa:1b:43:dc:d7:ec:df:c8:46:ec:11:87:45:43:41:f9:6e:
d4:ca:d3:d6:53:e6:0b:e7:85:d7:dd:f1:9a:35:9d:29:2d:1b:
30:7e:7c:74:c9:3c:f9:26:05:28:50:eb:1e:9d:e7:73:18:6b:
6c:21:4d:d8:9d:a4:ac:41:88:b6:cf:ee:b0:9e:e1:32:8d:46:
bd:f0:00:73:e8:d4:0b:35:70:09:15:85:b2:bb:6a:47:df:33:
90:0b:45:23:60:81:e2:c8:47:27:6f:a6:0f:94:11:d5:cb:17:
86:d2:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:28 2025 by rpki-client