Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: aJ7Qcq9z3cnYz5+1dORmm3TPDvOekmGdWU+oHNq20os=
Subject key identifier: E4:25:03:48:34:F0:28:48:A5:13:BD:DD:61:CE:FC:24:90:60:E0:29
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0198D65FEAB30C6E1FABE796739132E6438F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 092C
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: ke5eiNr2D6S7pYPEAaFPcrjvau2urdrw3xHhziqntu8=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ea:b3:0c:6e:1f:ab:e7:96:73:91:32:e6:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=e425034834f02848a513bddd61cefc249060e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:48:58:23:fa:a7:d3:c4:7e:3b:fa:3b:93:
20:35:1c:06:2b:0d:fa:06:e5:35:61:0c:9c:b1:09:
69:b1:48:c3:10:11:86:b5:20:e9:a0:d3:81:07:41:
72:14:2f:7d:7a:f9:85:ca:4b:d5:99:61:f0:f6:72:
92:f0:7b:ff:a6:8b:f9:57:78:21:80:f4:43:3f:5f:
84:b8:b5:93:aa:4b:63:f7:a4:8d:08:53:72:8e:97:
e5:4e:63:12:b2:7d:08:de:16:f0:f9:5a:52:59:bc:
d2:a7:85:89:46:46:27:82:18:12:1e:92:b2:2e:dc:
67:1d:07:0b:f3:a2:d6:00:fd:4c:fc:c0:87:fa:1d:
04:bb:93:cf:31:c4:5f:14:ff:8a:e6:41:b6:22:0d:
6d:d5:6e:96:9e:78:d0:ce:bf:05:ab:14:ed:c3:f1:
be:b7:f7:1d:76:35:26:7b:66:7c:4d:d8:fe:23:32:
19:f8:79:09:b0:56:c6:54:69:9a:60:bf:b7:6a:7e:
f5:b7:a8:5d:c8:b3:92:f2:87:bc:5d:86:25:f9:09:
9b:b3:6f:6b:7d:cb:43:b5:87:c1:07:27:8d:33:18:
22:7e:b1:30:eb:28:46:bb:af:85:ec:c7:d0:be:d2:
db:61:67:5a:3b:9c:80:b4:62:67:77:b2:0e:8f:b6:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:03:48:34:F0:28:48:A5:13:BD:DD:61:CE:FC:24:90:60:E0:29
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:b8:b0:90:3b:d5:98:3d:ac:fd:e9:6e:9f:ab:fe:8f:10:
53:e2:89:31:3c:f3:47:c1:a9:d7:99:a9:14:4d:e7:37:be:a7:
4f:5e:ed:f7:27:40:60:06:03:be:32:40:23:20:3f:8a:c3:c7:
5d:27:a9:47:64:33:82:36:fe:51:db:de:6e:38:ea:6d:9a:f4:
0e:cf:e9:bf:73:9e:8d:d5:8c:f1:19:c1:c3:d7:c3:e3:0e:bc:
d2:fc:62:1b:f0:01:30:5d:8c:47:7f:7e:4e:41:a1:bb:45:e5:
ae:28:e9:f6:c3:28:5b:40:48:8e:b9:4f:61:48:eb:5d:d7:55:
5a:ae:53:0f:79:aa:ad:f5:2e:24:ca:5d:a8:08:9f:e8:8b:1e:
10:c8:75:69:e4:00:51:f5:c1:e4:55:84:3d:b1:35:16:1c:05:
3f:6e:4b:46:64:41:a6:bb:a2:e5:b5:f4:b3:58:de:56:36:93:
5a:a2:d2:d2:73:ee:fa:9f:b7:82:8e:9a:48:5d:51:fe:44:69:
fc:8d:b0:d9:9e:95:bd:90:4e:c9:a6:d9:21:3f:cb:68:72:c8:
c5:01:0e:1f:1b:e8:a9:9a:9d:11:5c:5b:13:fc:a1:66:a8:53:
b5:20:7a:a5:2d:89:15:26:25:47:ff:d3:a1:52:9d:a3:ec:2d:
d0:6f:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:32 2025 by rpki-client