Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: L9nsx07bSkzJ0QDOhEaaLh8IKhPuei7YnSGflTIhJxM=
Subject key identifier: 09:19:2F:4A:F0:54:3D:6B:99:2A:23:DB:CC:02:DB:6B:3B:70:A7:FE
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 0198D47324AF0A74D91B09FE3CFA12C94010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 01:02:52 +0000
Manifest this update: Sat 23 Aug 2025 01:02:52 +0000
Manifest next update: Sun 24 Aug 2025 01:02:52 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: OoCWXX3Fq5XfD9L6LVgA9mKSfnAurWydYjn/4rcUw68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:24:af:0a:74:d9:1b:09:fe:3c:fa:12:c9:40:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Aug 23 01:02:52 2025 GMT
Not After : Aug 24 01:02:52 2025 GMT
Subject: CN=09192f4af0543d6b992a23dbcc02db6b3b70a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:18:ed:4b:75:08:1a:0e:72:a9:ff:42:08:
d9:cf:b8:99:39:7c:30:e8:d6:df:aa:a1:80:fe:4f:
49:75:6b:b8:22:74:85:eb:79:4c:f3:1f:c7:29:67:
0f:ba:90:ac:fb:d3:72:01:b8:8f:1d:4c:82:5c:9a:
9c:a1:15:3b:f8:5e:f7:cb:05:a3:fe:54:22:9b:4f:
26:f5:12:9a:8c:9b:3d:e5:42:1d:4c:6e:51:1f:80:
e6:4c:72:e3:4e:df:60:20:4f:36:b2:8f:ce:e7:2d:
62:4d:b9:ee:0a:08:c7:85:51:4d:7d:a2:34:45:7f:
79:ac:0a:55:23:27:e8:b3:d7:ec:d0:18:00:4a:a4:
fc:9d:9f:f7:8c:96:c5:63:bc:8a:9e:82:c0:74:7c:
89:d5:3f:bf:4d:68:00:42:14:dc:a5:15:db:b3:c5:
a2:3c:e7:b7:6d:10:95:30:1d:bc:b1:dd:92:c8:14:
e6:94:ed:66:f9:f4:6c:8e:5d:c8:e4:04:4a:a7:bd:
f7:bc:0a:ec:fc:8b:f8:24:33:7f:fc:24:35:8b:93:
b6:d2:01:3a:05:51:5c:b2:cb:d2:86:04:e2:8f:12:
3e:3a:11:0b:8b:ec:f9:9a:c2:06:f0:f9:af:f4:9d:
c4:69:7d:59:d0:72:1b:b3:bd:5e:7b:81:f6:76:94:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:2F:4A:F0:54:3D:6B:99:2A:23:DB:CC:02:DB:6B:3B:70:A7:FE
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:97:73:c6:e6:c6:c2:e3:2a:81:98:7f:7c:99:eb:69:87:
7d:39:a5:58:c4:78:99:04:2b:6f:e5:88:f8:d0:00:e1:39:cd:
74:9a:af:3c:9b:20:93:8b:38:89:cb:ee:59:f3:8b:fd:95:2a:
f5:96:f1:90:f8:5b:9f:5b:8f:fc:c0:52:8b:a4:87:d0:6e:77:
61:a4:28:d9:c9:cf:43:4c:b1:b8:f1:95:16:cd:0b:7c:48:9f:
aa:d9:f4:10:c5:6c:e9:db:a1:1f:ef:17:93:f1:90:06:00:f6:
2b:99:80:b9:4d:5c:5c:99:f7:75:42:3e:65:d7:3e:78:5a:10:
cc:b6:60:b8:31:d7:08:31:d0:a4:58:54:1a:b3:01:79:11:d6:
db:3f:59:a6:e5:33:77:57:bd:6b:c2:8e:2a:33:b8:b0:19:37:
24:2e:b9:5a:d5:bd:e6:c3:dd:bc:f8:be:88:40:1c:90:34:7f:
c3:95:ed:12:e6:0d:4f:ea:0d:8f:62:ad:64:21:bc:b2:3c:67:
59:21:46:ce:5c:ad:18:6b:81:3f:e0:34:8d:be:5e:29:42:bc:
af:64:c1:62:b2:e3:d6:c3:82:1c:6b:55:f8:19:58:41:14:be:
5c:a6:fc:62:c1:9e:52:cd:d3:0a:62:c6:59:85:a4:7c:59:4a:
b1:97:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:21 2025 by rpki-client