Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: DL/MPcpBjr3S3P7GlDIRghfV/QxC4ypU1M3Rzl5VfVg=
Subject key identifier: 8D:3F:8A:4F:2D:8D:CD:73:FF:63:23:83:4E:FF:8E:53:25:F1:D8:68
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0198D4E06706CC1F41464E6CB6E5ECE99AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0FB0
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: 44pwI4fioOfCBRzD2DXDGeBebQtHFOnjMzwRC/xLeQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:06:cc:1f:41:46:4e:6c:b6:e5:ec:e9:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=8d3f8a4f2d8dcd73ff6323834eff8e5325f1d868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:48:b3:1d:23:58:31:fc:dd:8d:49:e4:89:
2d:19:a6:ba:1f:cd:b3:61:2c:da:dc:69:b3:da:42:
88:65:f7:c4:db:54:24:9b:b0:02:b2:d6:de:ad:e5:
37:bb:ea:a7:a9:f3:fc:e0:25:de:1a:15:ac:14:ed:
8a:5f:37:3a:11:66:27:73:75:62:08:94:47:2d:ed:
5a:8b:fc:3a:d8:ee:06:82:aa:2d:84:01:85:82:4f:
21:be:62:69:a3:a9:59:ab:0c:f8:f9:30:24:7b:68:
fe:e4:83:c2:bd:cd:fa:64:4b:4a:e3:ea:0b:be:63:
4d:9a:46:4e:79:53:df:d8:ad:78:b7:32:44:bb:71:
90:25:c4:51:c0:28:0b:6b:f5:50:61:32:73:80:f5:
83:e5:3d:bb:ea:e5:a5:4f:93:ed:68:df:19:a4:43:
d7:9b:05:eb:5f:49:56:eb:60:bc:de:44:a9:62:29:
35:09:38:bf:90:a2:8e:9e:08:fa:b8:bd:12:ea:0c:
27:c6:c8:52:78:eb:bd:50:e4:b2:12:29:51:b6:f6:
3e:74:83:34:df:8d:41:f8:bb:7f:ab:14:04:90:72:
d3:87:e5:9e:42:8e:3e:6f:c9:aa:5a:38:84:41:37:
dc:a5:ea:43:55:00:07:9e:6c:95:72:dc:a9:60:32:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3F:8A:4F:2D:8D:CD:73:FF:63:23:83:4E:FF:8E:53:25:F1:D8:68
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d7:e0:6e:67:71:4c:d6:f9:d4:93:bc:7d:c1:a3:99:d6:81:
45:91:1c:40:7d:e2:b4:a9:eb:f8:46:d2:53:b9:79:db:5c:a2:
c6:c3:e2:6d:87:3a:5b:8e:06:0b:77:cc:f3:1c:7d:9a:93:ed:
9c:88:02:e0:06:5e:b8:4f:d3:61:4d:da:7b:47:4b:d5:9c:a1:
53:65:55:3d:f7:0f:d1:9c:62:66:98:b9:59:52:0e:58:84:be:
c5:50:76:e6:8b:47:e4:0f:d2:42:c2:5e:c6:22:d2:c1:71:90:
bb:d1:c2:3c:f6:96:1b:a8:91:f1:b9:e2:d9:43:1d:14:af:a4:
f0:98:ef:cb:07:38:97:e7:54:dd:e6:40:32:e6:b0:48:ae:50:
c2:05:a1:d3:f2:0e:86:ff:ae:86:cc:7f:a4:fa:a0:bd:cc:f9:
8d:08:5f:58:b6:58:26:03:68:c0:ad:33:c9:93:ab:a9:67:d5:
3d:bd:00:d6:bf:25:73:55:ef:5e:52:dc:76:ff:49:95:9c:47:
02:d9:b4:9a:aa:c5:7b:ce:d0:b3:18:fb:d7:51:fd:3d:99:8c:
29:cc:08:fa:ca:09:5f:9e:1a:8c:c8:72:4c:7a:4c:7d:53:aa:
69:68:a0:ad:ae:b3:ea:9b:28:4c:e2:21:33:45:42:0d:76:c8:
44:f9:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:41 2025 by rpki-client