Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: Tdx6WCxtEi33pzVLa/Asih9a6Yf4z2o3PUSJCegA4PI=
Subject key identifier: FA:BF:1E:28:38:67:C0:02:6E:DE:5B:F0:A5:4C:DE:9F:02:0F:D1:56
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 0198D4742C11096D88E5393E50A074A82F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: +oPWvr5MLiZcFhVW/PBLb4GrYFF4WFgY4/ZHpNLAq54=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2c:11:09:6d:88:e5:39:3e:50:a0:74:a8:2f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=fabf1e283867c0026ede5bf0a54cde9f020fd156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6b:e8:33:22:05:20:10:ad:13:87:ad:5b:ed:
7b:e8:45:ae:7f:7c:41:74:81:fe:7f:60:33:2a:91:
c1:1e:79:72:c5:2b:3c:ef:9e:75:7f:34:01:e0:50:
cd:07:3f:4e:e0:c6:a0:49:72:e2:88:c5:08:6d:59:
21:bb:2f:b4:cc:c4:6b:9e:33:fd:9d:a1:9d:fa:d9:
38:ee:85:99:04:75:5e:c8:1d:a0:07:b2:b0:d8:19:
db:e9:37:0b:99:61:53:79:8a:e1:f6:1c:57:4a:e6:
a9:70:a0:aa:ee:e5:07:d0:b4:7e:42:ef:58:c4:ee:
39:72:6e:9c:5a:22:e7:d7:98:30:69:c5:b2:43:a8:
a4:73:6d:ca:85:21:6e:e3:17:88:c0:ca:68:45:ac:
19:90:08:f2:f3:0d:6a:38:03:d7:6d:88:32:f8:d0:
77:8e:d5:18:ea:39:76:81:b7:ae:00:68:d9:82:34:
53:54:ef:c7:f9:1f:d0:2c:ec:dd:df:f9:39:51:86:
b3:16:64:99:82:24:ca:a1:14:b2:ca:df:6c:da:58:
a7:2f:c9:9f:13:fd:65:b4:a5:2d:d3:6b:a9:36:83:
27:5d:fa:2f:51:6d:7a:d9:89:42:b1:6e:c0:9f:f4:
5a:30:e6:eb:13:d0:0b:57:1c:2d:30:f8:e6:28:e9:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:1E:28:38:67:C0:02:6E:DE:5B:F0:A5:4C:DE:9F:02:0F:D1:56
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:4c:19:4f:2a:c0:af:a0:63:37:6f:8f:a4:bc:e8:bd:46:
c0:c5:e3:0d:34:c4:ea:b9:b2:b9:47:71:28:97:dc:e9:a5:94:
66:d7:08:74:2c:72:82:29:7b:60:09:8d:ee:c4:ce:07:91:74:
f4:4d:46:1b:b1:e7:45:7a:c8:26:78:2a:83:a4:e3:9c:11:66:
7f:51:cb:e1:0f:07:fb:1f:fd:aa:d2:89:ed:17:09:77:f7:0c:
60:33:39:3d:94:c2:bb:70:77:2a:2b:24:6d:98:de:fe:88:97:
26:ec:01:7a:87:e8:08:d4:29:80:91:44:8b:ed:35:08:51:58:
96:a8:12:a1:aa:81:0c:9d:c6:34:8b:29:43:f0:21:db:00:da:
b8:97:10:f0:26:da:b0:7d:d8:1e:b5:ef:a9:89:16:26:92:0e:
dc:85:79:2d:e1:b0:14:0b:ab:1c:ed:68:f8:8a:e3:c0:66:69:
b7:27:65:e2:89:71:35:c2:4f:0d:22:5d:c0:d0:ce:a9:de:5d:
6d:5e:ed:35:2e:90:24:dd:32:cd:8c:ee:32:b8:ba:a3:c6:07:
ad:e9:44:8d:7c:4f:6b:d7:92:65:14:23:b2:69:d2:ae:13:82:
a5:27:9f:a8:e7:1e:43:74:cf:05:32:9d:0c:b3:f4:91:69:6c:
6f:d6:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:46 2025 by rpki-client