Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: ewhUZ5mHobi2uoptkg4wW0ScAhD/YcLC8C4YQM6nkSI=
Subject key identifier: 7E:C7:37:97:25:42:3E:7E:78:FD:77:A1:E9:A6:60:0D:FC:28:3A:D1
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 0198D4A798E99DEFA5EA307EDEF780C62FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: UMAw0Pyw5e00GgnztBlueaMyIR3sLz5+mhi9a12M+1w=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:98:e9:9d:ef:a5:ea:30:7e:de:f7:80:c6:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=7ec7379725423e7e78fd77a1e9a6600dfc283ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:1d:27:83:2b:47:aa:65:5c:1b:6f:50:4b:
77:5a:b7:2a:39:70:8c:28:5d:24:c7:21:a3:90:cd:
78:57:33:9a:32:1a:32:0e:7e:0e:a3:4f:6d:19:38:
56:cc:98:16:69:70:d3:32:0b:9e:82:60:82:aa:1d:
96:de:a0:5c:6f:4a:10:8b:be:a1:6e:20:dd:5d:3e:
cc:3b:84:ff:de:95:67:8d:0a:26:6b:8a:85:b8:80:
9b:f1:df:96:9e:15:ca:15:f0:ea:27:38:40:2e:32:
ce:04:c5:65:f7:1a:bd:0c:bf:e4:c2:57:7b:32:10:
9c:42:0e:12:11:00:4f:1a:87:b0:d0:83:60:d7:a3:
07:c7:be:7c:4d:9c:d4:1e:79:29:66:bc:eb:60:0a:
72:5a:24:bd:6a:32:83:af:4f:3b:ad:94:d1:77:78:
a1:c7:b3:f2:7f:7a:d5:f6:13:eb:ca:67:83:c0:17:
2f:d2:7d:44:2c:ce:dc:36:4a:3e:9a:de:0d:c3:f4:
8d:8b:19:2f:c2:59:92:55:d9:b4:aa:3d:c8:1c:80:
ab:fa:c7:49:a0:8a:f0:b0:ed:da:6f:59:b1:55:d6:
56:45:2d:e5:ba:8b:6f:d4:96:49:c9:0a:e8:4b:36:
92:9c:8a:99:18:5e:fe:63:67:3c:87:4b:06:30:33:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C7:37:97:25:42:3E:7E:78:FD:77:A1:E9:A6:60:0D:FC:28:3A:D1
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:3d:b6:99:d6:8d:a6:96:04:cd:fd:b7:5f:3c:b1:03:56:
f5:26:06:f7:74:32:3e:ad:61:c1:65:4f:87:83:7e:28:2b:ed:
2f:49:b4:1f:83:f4:c1:e8:83:6e:b0:42:c7:ad:8c:f4:9f:81:
16:7a:fd:92:77:9e:50:80:89:3b:40:83:a0:7d:cb:70:da:59:
d3:f4:aa:4b:8e:c9:11:02:0c:fb:e7:ef:e1:b2:7a:a7:cf:f8:
cb:b6:a6:89:e4:08:37:b1:20:c0:75:1c:e8:3f:6d:4a:d4:96:
4b:37:65:05:93:e8:ae:be:bc:6c:24:91:ed:a4:cd:b5:05:c2:
ba:3a:cb:bd:21:1f:a5:26:05:42:a9:6b:1d:ba:60:d3:ce:6a:
3e:00:36:c6:06:13:87:f8:e8:43:b1:e0:3a:74:09:49:ec:05:
a4:dc:57:b4:34:e9:b1:23:84:c7:84:ed:dc:d4:56:3e:f9:19:
dd:f3:af:db:ca:e6:dd:b2:ff:25:78:59:ed:e8:7f:34:df:38:
48:77:d2:dc:95:44:3f:43:9b:64:46:90:7c:31:c1:44:3f:d1:
2b:ae:9c:8d:06:ee:d0:a9:28:b3:d0:14:09:33:c3:5f:c6:8b:
30:9f:27:f9:c8:ee:68:f3:3f:0c:01:77:d5:6c:c0:90:a7:47:
01:ce:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:55 2025 by rpki-client