Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: z4FBH0CTYLHyGszCjz5uqr6vJo7BP1afudn/HhLW+s4=
Subject key identifier: C1:05:97:81:CF:0E:F6:9D:DE:30:77:20:10:9D:9E:8F:81:2E:92:CC
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 0198D65FDD824D7551C72A9901D32CD4CDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1257
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: uXn+JTcknD8oOMVgAvNfgRb1t38nMI96Rwf9q5+3orI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:dd:82:4d:75:51:c7:2a:99:01:d3:2c:d4:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=c1059781cf0ef69dde307720109d9e8f812e92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:29:2b:e5:97:23:f6:9d:4d:35:9e:78:27:
c8:da:12:13:c1:35:47:90:7e:16:3b:93:81:07:ad:
1d:96:d2:67:79:01:c8:3e:dc:08:09:8b:a8:6d:fd:
2f:71:bc:ec:20:94:19:f4:32:7b:44:ff:4a:51:d7:
81:d7:3b:7e:b4:c0:d0:d1:dd:78:ab:70:18:6e:3f:
1b:f9:aa:1c:53:e3:45:6c:73:cd:75:1e:bf:fd:bb:
ca:af:ad:14:94:7a:e6:18:6a:88:3c:6b:e2:f9:08:
75:ce:df:07:22:99:46:5b:f6:73:18:11:9f:43:04:
6d:84:b2:bf:71:3b:24:67:fa:6f:47:b4:61:c2:83:
42:4d:4a:50:49:f9:1b:3f:de:2e:4d:09:61:7b:e6:
ca:6c:3c:62:dd:68:49:15:21:a7:2b:d5:92:a3:47:
75:f9:c7:3d:5c:2a:55:1c:27:42:95:42:20:1c:54:
ea:77:46:ae:6a:92:04:01:9c:77:04:d7:2f:bc:86:
27:be:4d:20:00:bd:5c:02:e2:9d:b6:ab:52:4d:2d:
a6:5c:91:c2:06:fe:e1:fe:57:d8:28:3e:66:0c:01:
79:10:61:0c:64:85:2a:d9:ba:67:2f:0a:7c:8d:96:
04:dc:fe:99:1d:4c:44:0a:58:0e:78:aa:cb:be:0f:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:97:81:CF:0E:F6:9D:DE:30:77:20:10:9D:9E:8F:81:2E:92:CC
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:68:05:52:1a:2d:4b:fe:74:f5:e9:01:4c:ee:a8:c6:c7:
6a:c5:96:b9:42:ba:bf:fc:bc:ba:a8:a5:8f:f6:94:d0:18:19:
e7:9c:a8:cf:b9:64:dd:90:c0:56:14:db:a8:c7:2f:51:2a:8b:
82:f0:fe:58:d8:aa:aa:17:a1:43:51:b7:50:32:df:aa:11:12:
d7:f1:15:75:71:ba:3f:d4:c3:b3:e2:6b:56:0a:18:48:e8:69:
de:67:c0:9b:f6:85:27:cb:e3:ed:eb:3f:68:51:ff:4e:91:ce:
90:c6:87:67:dd:27:44:9e:d7:08:c9:78:22:b7:37:8e:cc:46:
d3:8d:2a:56:15:70:86:e1:5c:1b:4c:88:7a:7d:dc:d9:87:a9:
5e:a2:1d:0a:ec:4e:a2:3c:af:f8:fc:af:24:51:54:80:01:f9:
f2:92:7a:be:45:14:38:26:30:77:8e:de:93:7b:40:9e:7c:df:
35:94:95:e5:05:53:2b:3a:ca:10:8c:94:58:7b:f7:a8:43:4c:
d0:f3:9b:2f:4f:d9:34:61:bb:2d:be:86:48:b3:76:c8:80:05:
75:43:03:1f:3b:fd:c9:3f:a3:f5:31:f8:e5:af:3e:88:1e:b0:
84:c8:cd:6a:d8:89:62:b8:9e:e9:48:0b:9a:d4:62:2e:19:f8:
d1:6c:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:58 2025 by rpki-client