Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: +MnqcQI4eGekilMmCpG4Z5AQo7K9oGBjIuD+M7qc0OE=
Subject key identifier: 02:57:9A:7E:15:C0:43:90:73:C3:EC:01:EF:DD:A0:B4:A5:E7:B7:A0
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 0198D69879CBF7B1CA58290E4F8768DE51E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 015C
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: kgSHnHYj3LsLnO6s92YMgBm40fkS780zA0YXkglk2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:79:cb:f7:b1:ca:58:29:0e:4f:87:68:de:51:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=02579a7e15c0439073c3ec01efdda0b4a5e7b7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:fd:92:42:41:19:ec:ef:5c:b4:36:16:f3:
3d:78:a7:16:8d:e5:13:bb:13:57:c5:d9:34:94:13:
8b:27:cb:38:f4:09:28:46:a5:3a:2b:6f:6b:96:45:
dd:bb:92:81:c7:dc:07:20:bd:31:93:6c:5f:8c:95:
bd:7f:86:52:01:63:6c:f8:54:34:b6:25:3f:24:08:
b8:51:1b:a1:0d:84:d2:d0:52:e2:77:bf:ad:00:ab:
13:9f:e4:a2:2d:8e:66:cc:0b:f8:82:ee:c6:f4:53:
58:ee:53:1c:a2:c0:cf:bc:68:35:01:64:79:f3:c9:
51:25:d8:5a:2d:0c:09:77:28:6a:ee:3c:68:19:80:
5b:3b:2b:35:a9:50:51:32:a6:af:ec:9d:2b:23:9a:
50:53:00:69:36:a5:fe:0b:e6:39:12:d5:ad:b4:77:
29:ba:8a:e8:50:a6:6c:a0:81:65:ed:6a:5f:22:32:
42:27:70:e0:e5:b8:9c:c8:d2:49:e7:82:c9:e4:2b:
93:e5:00:f9:78:22:0d:5b:bd:3b:1c:62:78:1d:48:
17:1c:0c:79:1a:e8:42:86:49:3b:9e:50:03:3e:bc:
bd:69:90:bc:8e:07:d7:4e:ec:24:12:55:71:77:85:
95:3c:e0:4b:79:02:32:4b:b0:8a:a5:36:6d:e5:be:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:9A:7E:15:C0:43:90:73:C3:EC:01:EF:DD:A0:B4:A5:E7:B7:A0
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c5:51:66:13:0e:9a:3f:c0:e4:20:df:86:c4:e4:d6:79:cf:
e7:38:11:57:eb:66:a2:e4:a9:5f:a4:83:da:9f:bb:3f:e1:83:
42:94:c8:06:f7:3f:57:35:d2:31:2d:62:84:15:29:fe:f3:91:
bb:0f:68:58:75:5a:16:d1:fa:d5:9d:db:36:81:cf:73:15:ae:
78:91:93:00:d0:6d:4c:92:e4:b5:cb:ab:51:4a:7d:66:71:e2:
c7:cf:41:3a:f6:90:0e:3f:fd:11:a1:21:b6:5b:be:41:db:43:
11:b5:41:83:af:e1:0e:32:9f:02:15:3d:e4:86:21:02:f3:c0:
02:76:a9:7a:24:0e:fe:a9:e1:68:02:39:e2:86:cb:83:5e:eb:
39:8d:3b:81:9a:84:c5:5b:d5:c9:94:bc:2c:68:bb:16:92:08:
eb:2f:31:9b:d3:d8:81:78:ea:a3:a1:b7:f3:ad:d3:96:1f:e0:
53:c2:8c:8a:1a:27:c8:c7:a7:98:9f:dd:50:19:51:9c:2c:12:
37:dc:53:b0:af:04:bf:8b:0a:9e:c1:79:65:44:3f:a0:d7:80:
ec:d5:17:2d:5b:66:07:b1:c3:8f:75:2e:ee:a0:96:7b:1f:b4:
94:53:df:dc:fc:c4:06:0b:3a:6e:b4:4e:2d:0b:b9:d0:db:24:
d5:1a:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:53 2025 by rpki-client