Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: lcJbMcxMGNKehT9uV/a7nCg+ndKPgBsMZFlrd4l8AnU=
Subject key identifier: B6:48:EC:5D:CA:71:98:D4:65:8A:93:8E:4A:5C:FF:B8:C4:CB:53:21
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 0198D5F14F317AD2A13F4137160829F44A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 05E1
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: Kh/xiYj8DP4RWA/VIhoPUQTek+s959T/dZaq3dorQWY=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4f:31:7a:d2:a1:3f:41:37:16:08:29:f4:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=b648ec5dca7198d4658a938e4a5cffb8c4cb5321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:f9:c5:4d:22:51:cf:2f:a1:da:19:d2:3b:
45:df:ed:c7:bd:57:be:2e:03:21:83:d4:75:39:49:
d8:ae:1e:e9:51:39:3f:7e:04:70:9e:33:88:ca:62:
5e:ab:af:b0:42:78:9b:1c:92:2b:4a:46:9e:15:ba:
b5:9a:90:64:51:e4:ad:f2:ba:6d:47:d8:23:48:e2:
4b:ae:b5:24:b7:fc:14:4c:1c:34:71:40:9e:20:27:
63:a4:8b:6b:bb:0b:f6:32:50:a4:de:8c:35:c1:63:
6f:10:77:ce:ac:5c:dd:f9:2f:e7:23:cb:ec:93:da:
c5:0c:24:b3:0c:a6:60:a0:65:7c:25:90:b1:bb:fe:
da:99:57:d8:ea:94:18:2a:f0:27:93:d3:fb:07:88:
07:a5:4f:08:4b:c1:f9:27:95:2d:66:92:63:76:23:
7a:84:e4:89:fe:f6:34:45:a3:6d:ca:13:87:6c:f5:
d1:85:49:60:35:b9:d2:a7:cb:ca:bf:94:93:85:2f:
d9:89:a0:d5:44:82:20:6b:ca:54:6b:16:e7:01:81:
02:cd:38:36:51:0f:38:d2:82:99:78:3f:d2:81:1a:
45:bc:3d:bd:d2:67:96:94:28:a1:20:19:20:b5:29:
0d:61:02:7b:f5:e3:4b:c7:c4:a2:d6:05:54:f2:7a:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:48:EC:5D:CA:71:98:D4:65:8A:93:8E:4A:5C:FF:B8:C4:CB:53:21
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:e6:0f:da:bd:fb:12:de:f9:61:93:67:78:ea:5f:71:8e:
12:7f:b6:0e:cd:ad:bb:99:a5:84:f4:7c:d2:02:1e:e5:d2:b4:
72:a9:71:3b:df:1a:97:33:21:76:7b:62:29:b2:53:01:86:6b:
a2:94:c4:a8:2b:e5:40:db:24:8f:a9:7f:c7:f2:98:0b:78:e4:
7d:b5:00:79:26:b4:54:2e:31:13:f8:ff:34:59:57:31:b7:e2:
28:f3:62:36:3d:ef:d2:fa:03:6a:13:00:09:17:de:a8:fc:4d:
7f:88:65:de:f0:63:5a:fe:cf:45:cb:21:a9:42:f6:af:e2:b5:
9b:03:c6:87:a0:a3:3f:89:ff:67:d1:b8:2f:e9:0e:0d:a8:7d:
a4:31:cd:88:8c:e9:c8:45:d2:61:38:3d:b7:4f:3d:e8:e4:b2:
6a:cc:91:99:61:97:80:3a:68:8d:af:ea:b6:02:9e:9b:2f:c1:
9c:ad:0b:71:a1:5f:37:8d:a0:08:18:06:73:30:32:5f:45:eb:
62:b5:e4:8d:9d:18:cf:cf:74:74:bc:a0:e7:e3:52:4c:81:b9:
9e:76:79:cb:4f:d4:6f:f0:bd:cb:d2:8e:39:f3:a7:f6:66:2d:
f3:7f:91:35:98:6d:ef:3f:40:dd:c9:38:52:c7:df:bc:01:3f:
43:65:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:55 2025 by rpki-client