Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: 4jfMY3xQEKE5QPb3DtRFhS2PiaKmFXqxdHeIe++2iv0=
Subject key identifier: 8A:AF:72:24:F5:48:2E:70:9F:3A:73:31:07:6C:42:D8:05:83:21:64
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0198D4E0613BC7EE36C68D6109684CF0E5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0C26
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
2: W3qS8ccHplCENHnAWCXalJ4Lxq8.roa (hash: h3ysUJyoiR9Pxj5SMBpAdJdk3U65tHclFMzHCEEhX4k=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
5: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: 1xnEQ3lY17yf4lxHvX6rFMPMJrFXiGVRwi6KwtTAlVM=)
6: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
7: oQkeKuCNYYhtIVvVtY9bHW8pNwA.roa (hash: 0K0xoNqxLDuZubebOCg8Xa7Zpz+/co5/ESuCrauBj1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:61:3b:c7:ee:36:c6:8d:61:09:68:4c:f0:e5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=8aaf7224f5482e709f3a7331076c42d805832164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:ba:aa:2a:a1:ab:81:4b:fd:0f:9d:67:e2:
69:56:4a:cc:58:27:62:66:c4:25:8a:91:b0:67:27:
4c:cf:cd:cf:4d:93:ad:05:c9:f3:87:9e:ea:10:ec:
07:2c:3e:f5:6c:6b:55:37:dc:c5:11:f2:40:8e:76:
d5:c3:aa:d3:26:98:7d:df:de:2f:98:7c:28:67:3f:
58:9a:f1:7f:fc:1b:d2:0c:f4:fb:ab:10:fe:d9:ec:
a8:ac:d0:dc:3f:7d:07:bf:a3:99:2b:bb:df:2b:df:
7c:e2:65:24:b7:38:ed:96:eb:ab:00:be:da:ed:22:
15:cf:ce:83:57:ce:07:18:7a:6b:61:2a:83:13:72:
bb:8d:2d:6b:ea:cf:81:0e:78:f7:81:d5:cd:6a:0b:
51:b5:99:91:83:8d:93:4e:9e:6f:1b:d4:6c:01:c3:
de:77:c2:21:fd:d6:30:55:6f:26:2b:d2:60:03:d0:
98:2b:cd:40:a3:ff:bf:15:9c:27:44:6a:0b:c6:38:
78:d8:bb:be:bf:b6:fc:61:53:14:41:73:45:e1:bb:
69:1c:a5:79:a2:d3:62:6a:34:6f:17:4b:64:b7:34:
a3:40:1d:a8:33:8d:e2:00:15:bc:40:6d:6a:79:83:
17:ec:20:a3:8c:26:16:7c:3c:bc:6c:69:cc:7d:44:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:72:24:F5:48:2E:70:9F:3A:73:31:07:6C:42:D8:05:83:21:64
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e5:3a:b0:0c:8f:71:c0:5e:4b:43:95:87:71:6c:b2:a6:0f:
1c:bc:d4:91:82:fd:0a:b5:cd:4e:3b:98:f5:14:92:ee:b8:5d:
ce:fe:ae:b8:79:c4:05:a0:a9:da:21:82:aa:d1:89:f8:7f:8b:
b4:04:9d:d5:5a:bc:6a:7b:1b:31:88:25:c4:ec:70:51:b5:d9:
ca:43:fe:69:24:d9:9c:06:3d:66:34:62:6c:1b:81:01:fb:42:
42:98:bb:d4:b2:4d:65:e4:a2:89:ea:97:61:06:75:4e:cd:d4:
4d:4d:58:91:bc:4e:d8:fe:6a:64:2b:b0:eb:b2:94:66:f5:f3:
f9:87:21:1e:36:12:6d:e9:fb:0a:5e:97:65:89:75:81:13:80:
fc:40:01:34:1c:bd:4c:93:1f:6d:12:d0:57:bc:7e:c7:78:21:
ff:15:e2:f9:bd:95:d2:20:8c:d5:46:c2:62:b7:ab:cc:a6:f9:
f8:88:50:00:00:e4:78:e8:df:44:c3:d7:49:7f:f8:2f:b0:cf:
aa:c8:6f:b1:b1:02:e2:86:b0:85:fa:7f:41:c8:17:64:6e:b4:
ed:3d:5b:d9:cb:8c:6b:05:b7:03:87:79:0d:bf:3b:d1:70:7f:
c3:7a:c4:bf:c7:35:97:0d:0d:0e:da:a7:75:1e:47:ec:a6:f4:
d4:3e:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:28 2025 by rpki-client