Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: vKkkOdPsXDgviNOJq0v8pqg120iOaiJ1XYdBlv94oAw=
Subject key identifier: 25:72:FF:57:38:7B:77:F0:EB:12:4B:E2:64:BF:9A:B5:2A:D5:CA:E0
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0198D4A7D66B48808BEC83C7CF2CE06DCE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: 3boCM4SCqWzJR4zxCKGGEMlDWvqf02x1MbxhE7FHAA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d6:6b:48:80:8b:ec:83:c7:cf:2c:e0:6d:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=2572ff57387b77f0eb124be264bf9ab52ad5cae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:22:88:fe:ff:9b:65:29:86:04:28:07:61:
fb:65:60:85:bb:58:ed:64:76:f2:63:d5:d3:b9:29:
4e:72:5e:06:a4:db:07:08:31:ad:07:15:62:26:4f:
5c:b2:eb:3c:2c:b2:33:14:c9:1b:b1:df:42:d4:fe:
ac:4b:fe:37:53:bb:2d:7c:ee:66:3a:9a:ec:35:ac:
ac:4b:fb:b5:2d:63:6a:72:3e:f4:fe:09:b3:62:b2:
c8:7d:5f:af:47:52:b7:38:65:5c:fe:16:82:2b:14:
35:9d:0b:45:fe:c2:f3:3d:4a:0b:54:0a:0f:a8:a5:
06:48:e6:78:67:48:52:5e:a9:db:f7:af:83:10:6b:
60:99:e1:b7:24:17:35:56:05:82:3d:e0:00:9b:81:
c5:90:94:cc:03:a7:50:6a:56:1a:06:bb:28:93:a5:
7f:7e:93:39:14:57:be:63:ea:34:4c:50:23:ee:ae:
26:72:29:92:0b:cc:6e:a4:e8:d8:70:bd:84:11:00:
af:37:0c:57:db:c7:12:f3:20:4e:21:8c:eb:5e:2f:
9b:12:20:c4:f1:fa:10:f6:c5:a5:5f:d4:96:ff:e5:
bd:24:a4:a9:2c:a1:b2:5d:58:fb:39:97:2e:cd:f7:
35:f9:2e:0f:34:78:7e:af:1c:ec:ae:8a:4b:d8:ba:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:FF:57:38:7B:77:F0:EB:12:4B:E2:64:BF:9A:B5:2A:D5:CA:E0
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e1:6c:c5:09:3b:f6:0d:e7:e4:74:00:ec:ff:a0:80:04:87:
04:49:63:73:92:de:20:73:2d:a9:c2:be:01:93:2e:40:f2:82:
c6:77:d8:ab:9b:91:57:71:96:f0:02:de:78:40:a2:0b:4f:bb:
1e:f8:40:e9:8e:d0:06:fb:be:d2:ff:f5:f0:fd:23:42:3e:d0:
2d:aa:82:e8:fb:71:ad:17:91:fe:ec:0c:b6:77:e0:53:d2:b8:
26:9e:2d:23:35:f9:4a:ab:1f:aa:a7:d7:df:e3:01:72:84:67:
e5:b8:c7:cf:d1:ca:67:24:62:0b:4e:0f:7e:b6:46:b1:68:2e:
70:24:7f:66:b2:e8:36:a6:68:bc:ce:81:d7:f0:33:54:74:a0:
f0:b4:ac:d6:4f:30:16:4b:72:9a:ef:f2:76:6e:bc:be:98:de:
c9:be:f5:43:2e:41:17:11:b2:a6:02:be:a3:aa:5d:7e:a2:05:
70:6b:3c:95:11:4f:02:17:d0:4c:de:07:1c:ab:a3:6b:d7:d4:
02:b2:75:71:8a:26:9c:39:b0:2f:73:09:7a:91:94:36:2d:61:
40:23:8a:51:fc:c5:58:55:40:00:da:6a:22:3b:38:1c:ba:b6:
d9:ef:82:7a:aa:25:56:38:1c:22:34:0e:d9:af:88:4f:13:ba:
25:73:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:17 2025 by rpki-client