Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: b3flegvb0ccEW/lA9W8ad+unDQNGqkmY5MUw4uqv+1o=
Subject key identifier: F7:40:37:18:27:34:A0:13:1D:DB:BF:A7:C4:D5:1B:26:82:4D:EC:7B
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 0198D54E70CBBFC31352FC8252250045E63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 1604
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: SrH3/aEpMaKkZOTDJGsNcezCtuXokKwzVYjMF3avdDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:70:cb:bf:c3:13:52:fc:82:52:25:00:45:e6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=f74037182734a0131ddbbfa7c4d51b26824dec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:ab:0d:81:b1:21:e9:2e:89:bf:bd:bd:de:
c2:f1:e4:65:95:97:b2:f4:52:6f:de:f3:47:5a:9b:
91:9e:b1:5e:78:47:a2:33:4a:65:ff:59:c5:80:ed:
9f:75:03:78:18:c3:9f:8d:23:c0:e1:50:6c:7e:97:
da:e5:6e:de:5e:f5:11:87:09:3d:84:3d:7b:4f:c0:
67:e6:27:02:8c:68:2d:77:4f:36:31:f8:54:e4:fd:
23:87:ef:29:57:af:24:74:a8:7b:5b:e1:21:36:c6:
1f:07:88:22:fa:93:42:de:8f:4e:33:03:1e:2b:ef:
d4:67:16:63:30:cc:96:59:e7:1c:86:bd:92:67:8d:
b3:12:4f:73:65:c6:8c:5f:17:e5:b9:62:d4:f8:6c:
20:bf:c0:41:4e:c4:89:54:22:10:b0:c3:74:b0:cf:
b3:a5:c8:2a:d1:d8:13:01:00:9b:c0:12:a6:63:0b:
2b:36:0f:ae:32:27:47:ba:d3:18:5f:dd:62:0f:c2:
77:b3:1e:59:61:82:52:34:06:0c:0c:3e:e6:a6:1a:
9c:02:53:80:7b:a2:e5:dd:a8:05:8c:0f:99:7b:01:
07:dc:32:29:62:5a:fd:cc:35:ee:de:05:65:bd:40:
5f:43:d9:f9:07:c7:7b:3e:a1:98:85:a3:60:bb:58:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:37:18:27:34:A0:13:1D:DB:BF:A7:C4:D5:1B:26:82:4D:EC:7B
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7a:64:7f:64:37:6a:35:8f:1a:0f:30:bf:56:21:93:16:fb:
8f:d8:42:55:9e:19:86:75:14:d4:40:07:a5:fd:d6:70:f4:b3:
7d:f0:fa:8f:fb:1d:2d:eb:e3:a9:3d:31:b3:1e:3d:9b:41:1a:
ad:30:9c:58:51:19:8e:76:97:fa:4a:fe:68:5a:49:10:71:4e:
de:5c:11:66:4b:37:6b:64:11:60:af:1c:ee:0d:44:07:b9:cf:
ff:a9:53:6c:da:0e:f9:5e:f1:66:5f:de:bc:7a:1c:9a:6d:a7:
a5:1a:07:39:4c:78:1a:fc:42:4c:75:b1:17:99:8e:eb:3b:98:
93:24:b6:3d:09:49:82:6d:0a:45:f3:72:02:ed:fe:34:ce:5e:
59:c6:a2:cc:66:9a:43:a8:0c:eb:0f:71:fe:10:85:7c:04:08:
b9:5d:21:19:92:fe:a0:ee:cc:98:1a:e0:4d:ad:3d:ef:83:7d:
75:30:95:98:e1:92:46:f7:f7:88:13:9c:75:90:5d:5e:20:9b:
eb:67:fd:7e:47:cb:58:f0:26:bc:69:b3:0f:a5:78:7e:85:e7:
d6:05:77:1b:53:4b:cc:49:ce:ea:6f:b6:00:82:8d:69:61:89:
b0:f7:e7:73:a8:ad:36:d9:04:47:fb:87:b5:c7:ff:f7:8c:a9:
72:d1:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:26 2025 by rpki-client