Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: 1uVJ4fRFvI6KuncBMFvkKjnKu9AoUhfz2rNaG71ycYM=
Subject key identifier: E3:67:C0:CA:67:B8:2D:81:D3:64:53:7F:22:D5:26:07:91:BD:A1:5E
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0198D4E009CEDB88CB34D1A4D4E6720694F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 13EA
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: KqATASoCrK9daJezKLoaoX7wOEFkqVjrLgSxuGiEYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:09:ce:db:88:cb:34:d1:a4:d4:e6:72:06:94:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=e367c0ca67b82d81d364537f22d5260791bda15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:ee:2b:d5:eb:01:69:77:7f:5d:0d:6d:f4:
5c:78:2d:93:af:1d:b5:df:27:82:ea:32:5f:94:d5:
34:9b:bd:45:90:a2:ea:07:89:24:f5:b3:df:4a:57:
66:4d:31:cc:e5:3a:66:a4:e4:4e:fe:9a:bc:cf:3c:
34:65:b5:82:17:bf:81:e7:d6:08:6f:12:61:42:c6:
29:c7:09:47:0d:58:c6:be:9a:57:31:a7:16:22:44:
8d:47:8a:6d:e1:a4:70:cb:d3:23:58:1a:bc:00:ce:
fa:35:db:d8:72:1a:c5:be:39:78:a6:b1:2e:33:92:
f1:35:05:6e:a3:5f:33:a9:d4:3f:5e:7e:f2:f0:ab:
f6:57:d0:58:a6:f3:d9:e8:e7:a5:50:c0:d3:c1:c3:
3a:b9:62:25:11:e4:b6:ac:e7:5f:1a:a8:40:40:b4:
5d:fc:c5:c7:ec:1f:a2:d4:6c:b6:85:ca:1b:82:60:
be:bd:7b:cb:0f:28:6e:4b:b0:e7:8a:c9:53:ba:81:
cc:2e:00:a4:0f:1b:22:8b:f6:80:22:e9:7f:30:19:
c1:8c:38:ee:0b:38:75:48:5c:71:c5:32:0b:43:44:
f1:40:1b:9d:b4:06:6e:58:48:5a:5c:7f:be:f0:db:
a7:a7:c9:9f:ef:7d:11:3d:05:3b:d1:b3:0f:38:d8:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:C0:CA:67:B8:2D:81:D3:64:53:7F:22:D5:26:07:91:BD:A1:5E
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c7:98:39:90:e8:ec:fe:de:db:66:dd:50:eb:3f:77:13:26:
e1:b0:fb:ec:f9:ad:43:98:ca:1d:2f:2f:93:99:fc:fd:63:0d:
01:03:bf:3e:a8:17:00:5c:c9:2d:00:2a:b6:70:89:3c:bf:31:
88:e9:8e:cc:37:a0:5c:6c:b5:28:c2:11:52:c8:fc:6b:d6:21:
e5:95:e2:f5:3d:d2:90:09:de:7b:b5:53:e5:64:0e:bf:88:e7:
42:0c:81:6f:86:ed:ec:ca:32:ce:fc:35:ff:c5:07:44:04:75:
08:17:02:c6:f2:d7:6e:14:e6:fb:ae:54:17:2b:bc:aa:a0:c6:
6f:b7:66:a2:14:71:cc:0c:f8:56:3c:8c:c9:9c:84:94:d3:77:
49:46:af:21:4a:98:48:a6:c0:2e:47:8e:63:90:36:07:0e:63:
f7:0f:ae:6f:b3:5a:96:fe:77:29:96:39:ae:cc:1e:57:e7:b5:
3c:af:2d:36:75:fd:6f:45:b2:6b:da:fa:cc:fe:bb:cd:bc:35:
e7:97:70:25:78:e4:9b:9b:1f:a1:4d:4d:1f:ae:ef:be:90:c2:
01:c5:59:aa:a9:c4:69:59:ee:97:53:3f:8e:ec:2a:dc:5e:35:
c7:6f:f7:62:33:fc:ef:46:ae:e3:f4:35:d2:9e:a6:9d:00:90:
29:0c:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:04 2025 by rpki-client