Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: +2Kkf0AImqVC0D9uXKOlRi4CexHCPvrO9/7MqOTu7Ts=
Subject key identifier: 28:1B:93:64:13:DF:19:A8:DC:7E:F4:61:F0:C9:55:32:FC:A8:BD:F4
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0198D7E1635FF6F3E337982BFA41FCAE369B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 17:02:08 +0000
Manifest this update: Sat 23 Aug 2025 17:02:08 +0000
Manifest next update: Sun 24 Aug 2025 17:02:08 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: q63yjNkTzXINU+o9DIHuC6ZH+s08xbem8iee9kSSIOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:63:5f:f6:f3:e3:37:98:2b:fa:41:fc:ae:36:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Aug 23 17:02:08 2025 GMT
Not After : Aug 24 17:02:08 2025 GMT
Subject: CN=281b936413df19a8dc7ef461f0c95532fca8bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:aa:04:47:e8:e2:93:07:f3:d3:fc:86:02:
17:15:b9:88:cf:92:a4:56:9a:fe:10:15:26:ee:be:
89:11:5b:86:97:03:bf:84:1a:f3:1b:57:c0:e4:74:
3f:31:58:f4:68:98:6a:fd:65:f8:d3:7b:e6:4c:45:
92:41:fa:72:b4:44:7e:7a:f4:dd:4b:71:a0:3c:14:
d5:a4:24:a8:63:86:b5:5d:72:d7:81:ce:e8:41:5a:
3f:79:22:25:12:1d:07:cb:b6:3c:16:aa:29:69:63:
da:e8:e8:7f:ae:2c:49:0f:7e:eb:f9:3f:b3:ec:32:
ae:2e:f2:9f:54:a2:21:3a:58:c1:fb:89:b5:dc:ea:
0c:4c:7d:a4:6e:49:5e:34:08:a8:87:62:78:32:61:
03:7d:00:1c:2a:f7:6a:22:b9:3e:7b:e8:66:4b:b4:
25:dc:14:3f:0d:80:4c:a0:71:f9:2e:c3:53:a3:dd:
4e:c6:e3:a6:bf:fa:d8:00:15:7f:cb:0e:8b:c1:87:
ff:f5:c3:3a:ab:9e:b4:3f:2d:0e:dc:ad:da:a2:59:
c6:fe:9f:70:22:a8:a5:a2:0b:f4:b0:71:9c:b4:08:
e8:48:87:cd:e6:23:4d:bd:b0:89:87:a0:50:52:43:
98:e3:2f:a8:33:09:2d:1b:10:76:6d:2a:44:8e:61:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:93:64:13:DF:19:A8:DC:7E:F4:61:F0:C9:55:32:FC:A8:BD:F4
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:27:39:7c:d2:f2:9a:7a:18:a5:21:4d:70:83:f4:7a:c2:a5:
6c:23:75:91:e5:53:96:6b:cc:a7:08:e9:9d:1f:b7:d5:3d:3b:
ec:82:b8:0e:6b:35:ed:c8:7a:55:5a:7c:1c:5d:5f:fb:42:18:
fa:51:c1:1b:0c:dc:da:d1:ff:3d:d8:b3:b8:9a:db:e8:8e:0b:
77:c3:85:65:7a:c2:81:0b:ca:7a:cc:7a:b4:38:27:d9:83:b1:
7a:44:2a:51:97:85:db:f7:a6:91:51:e0:93:43:4a:5d:64:5d:
15:1f:76:6d:26:22:48:1f:59:fa:84:a0:61:bb:7a:ec:6d:9a:
58:71:67:7b:24:d3:85:24:ab:a4:87:34:1c:13:2b:59:e0:75:
76:6e:58:fe:87:3c:84:5c:99:91:15:27:d9:47:33:49:58:7a:
09:ac:28:d8:c5:e0:0f:e5:90:da:8f:db:f9:69:3e:bd:b3:7b:
c9:dd:a4:f6:48:2b:cb:03:18:3d:62:97:3a:da:1f:c2:f0:75:
e8:08:9b:44:62:69:97:6a:92:dc:75:67:ec:46:38:5d:39:fa:
32:7d:e4:26:ef:6e:3d:8c:67:d2:75:c9:cf:39:9a:7f:08:1c:
e6:06:3e:84:63:a6:c0:52:00:91:71:48:8e:6e:5f:1c:6f:90:
14:ed:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:32:03 2025 by rpki-client