Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: jslvy6zmQxrqjv2DKejEo90Zm+d55q8EpeR8cFs+dwA=
Subject key identifier: 8B:7A:BA:A2:E6:54:61:2C:6A:58:D8:37:EF:1F:EC:84:3E:8B:53:60
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 0198D473A55A4AB069DAC6600E355DAB2674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 0778
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: 6aXqr6TJfOZN2Vc648xImTZMWRGZur1Ijps1e1GDIj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a5:5a:4a:b0:69:da:c6:60:0e:35:5d:ab:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=8b7abaa2e654612c6a58d837ef1fec843e8b5360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c0:38:a6:fe:7c:ba:2b:a7:9a:d0:8b:23:21:
23:0b:48:49:6f:99:36:c7:47:26:26:a7:35:9c:73:
28:d2:75:56:ed:ba:7d:12:92:2b:86:4c:76:d0:17:
22:8a:61:1f:82:44:64:c7:d5:3e:bd:d2:f2:81:de:
36:a8:55:87:23:b4:ec:08:0f:d3:c4:1e:bf:ca:fc:
d6:17:97:e4:22:9d:8e:0f:95:2e:3d:45:8f:91:56:
ad:35:3c:91:49:de:5e:f2:33:8a:42:0f:28:a6:c9:
b4:0f:9b:b9:03:75:90:ff:cb:22:4f:ba:10:19:e0:
de:60:53:0a:21:5c:70:ad:0f:0d:cb:89:26:2d:d2:
18:e5:aa:87:37:90:77:05:e0:91:88:78:df:d0:9e:
86:47:f1:e4:73:4a:8d:51:76:4a:25:c2:45:d7:3e:
be:60:50:27:6d:e7:70:65:5f:3b:1a:57:45:c3:f1:
bc:df:b0:db:fc:69:6d:da:ca:f9:9e:c1:39:9a:55:
bf:7d:c9:17:01:51:9c:44:c5:92:b6:94:af:76:56:
a4:30:2a:46:04:7b:df:9b:70:10:e8:9d:62:2d:6f:
87:e5:90:e9:3c:d5:dc:84:47:6b:c8:76:d7:05:07:
5e:5f:72:89:3a:8f:6d:ba:97:fc:9d:47:47:dc:56:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:BA:A2:E6:54:61:2C:6A:58:D8:37:EF:1F:EC:84:3E:8B:53:60
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0d:85:96:e9:fd:a4:13:f3:ed:a5:e8:b3:0d:dc:db:9c:68:
27:c3:04:97:24:2c:35:f3:d9:8e:a0:b9:30:d5:17:a9:b2:f1:
3b:a5:a8:0b:4f:97:ae:d2:7c:63:9f:37:76:cb:ec:74:01:50:
66:ce:0b:5b:e5:af:e6:bf:4b:80:dc:31:88:fc:53:86:92:9e:
99:02:4b:d0:fa:82:84:03:89:7e:20:2c:c6:db:96:2e:f6:97:
62:79:a5:60:21:eb:45:ef:3a:d2:66:ff:f9:5c:83:db:65:07:
7d:1a:62:bd:55:55:0e:80:c3:bf:5c:36:80:7d:88:c9:4d:32:
d5:4b:0e:d9:d5:87:0d:4e:c4:33:dc:e6:3f:b6:08:27:d0:e5:
36:25:87:e3:f6:65:13:e4:01:42:9c:88:dd:a1:58:a4:d5:e3:
da:9e:91:d5:3c:50:30:9f:fc:79:2f:9e:af:01:a7:10:ec:59:
b6:a8:71:01:c7:fd:40:ae:c7:15:82:bd:bb:55:51:c8:14:53:
13:b2:d5:34:47:d5:9f:c1:e7:93:60:a2:72:2f:63:97:e2:4c:
3d:2e:09:23:59:5b:ba:ec:76:52:3b:1f:b8:07:cc:9d:be:5a:
89:fc:36:1d:9e:17:97:ed:ac:67:29:ce:a8:af:d7:87:f6:9f:
00:7e:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:25 2025 by rpki-client