Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: iw/mAsuWkKKKtRnU1fmQAaO8xNhom/GLYWvy34OZ5sE=
Subject key identifier: A0:FC:AC:FC:D6:60:08:39:DD:90:F0:8D:F7:14:CE:00:F1:9C:94:B8
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0198D65F408CE9D8B2AF7553614E0815A103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: aYVYu6VtC26lzRs/u7gLLt/jpcqO43RFwRWThHX3VOc=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:40:8c:e9:d8:b2:af:75:53:61:4e:08:15:a1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=a0fcacfcd6600839dd90f08df714ce00f19c94b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:00:9b:70:0e:73:2d:0f:29:61:8d:51:ce:
ab:05:6d:ed:11:18:62:e7:0c:ba:75:18:8c:72:9a:
d9:7e:32:6d:32:d4:1b:b8:72:7a:65:55:fa:31:fb:
73:73:83:cc:99:6e:ef:61:c9:26:5f:e9:ae:6e:d1:
72:ab:78:59:da:1d:b0:d7:9c:76:66:e9:53:65:77:
1d:cc:0c:21:ee:36:40:bf:8b:6c:fc:a2:92:3c:cd:
f9:8c:56:e0:f1:8e:a2:15:e6:07:8a:e5:f9:93:4f:
58:21:6a:f2:a9:ff:66:8a:c6:ed:91:76:47:86:e9:
84:56:78:9e:8c:4b:3c:ba:53:db:a1:87:b0:80:50:
ae:7c:96:28:ba:38:ad:52:92:e3:94:26:94:0b:a2:
14:a2:d0:70:c8:5f:df:37:d8:38:e5:da:11:f7:2f:
3c:43:6a:37:2e:58:b0:72:02:e0:4d:89:71:14:3f:
77:9a:5b:0e:00:e6:07:5f:c3:ce:db:7d:70:c4:98:
a9:1b:7f:5f:d6:55:6c:28:cb:e7:cd:77:e3:3f:83:
b8:c6:bd:96:22:b8:35:82:92:59:da:35:25:25:e5:
73:0a:02:7a:78:22:4f:65:c9:ef:2e:01:b2:89:68:
47:4c:d3:05:80:42:a9:13:50:f9:16:3c:26:22:ce:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:AC:FC:D6:60:08:39:DD:90:F0:8D:F7:14:CE:00:F1:9C:94:B8
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:6c:0a:58:b6:25:b5:e7:1b:4a:c1:7f:13:11:a0:f8:e2:
db:30:52:8e:0e:2e:b7:4e:fd:d1:54:72:79:0d:9e:80:a2:7e:
b5:32:8a:6b:75:5b:c8:77:23:6f:b8:3d:c4:72:55:d1:b2:04:
59:96:e0:ff:79:17:41:e8:55:33:19:e5:eb:60:81:ab:e9:52:
e0:e4:eb:4a:18:52:86:71:74:8a:53:02:3b:d4:a4:1b:d0:e2:
65:a8:27:43:67:00:6d:ce:05:d9:12:fd:37:b1:d5:fa:df:4f:
92:dc:a4:d1:87:b4:b4:04:b3:3a:a0:18:50:94:1d:b7:26:58:
ba:89:5e:81:d4:d2:1a:06:18:cf:5f:52:fa:72:05:fd:18:22:
e7:4c:8d:05:1f:97:d5:e1:0c:4e:42:6c:59:27:be:f3:68:9a:
ce:65:47:5e:05:29:9e:a7:cf:b2:e2:6b:66:f1:32:0e:97:c3:
83:45:99:0f:70:2b:d6:0f:1e:7e:8d:32:c6:ac:69:fc:25:66:
46:75:ac:f7:b5:d4:79:a5:c1:bd:22:cb:ef:26:bf:7d:c5:52:
4d:c4:6f:d2:a0:80:37:ac:d8:24:d8:1c:40:01:e5:dc:90:60:
4c:46:26:7c:e2:58:ff:51:18:07:4b:06:40:8b:62:86:ff:26:
60:e5:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:22 2025 by rpki-client