Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: /Pe/EATqgfCwmXCoifV1T7azSB7zkRRDUnfR3mbMEkM=
Subject key identifier: 94:63:33:65:8F:72:38:86:71:2D:DA:F4:99:F2:50:4D:56:E1:72:18
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0198D65F1711B303797200DBDA43C1E4780E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: 7DHH2hTQlA8bcx93VD5Tj46yS5shmZQVptc4cvBcUnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:17:11:b3:03:79:72:00:db:da:43:c1:e4:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=946333658f723886712ddaf499f2504d56e17218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:3e:cb:e9:c2:3e:ba:76:0e:8c:c2:df:a7:
85:f6:3d:cf:85:47:46:5c:fb:48:8d:ee:ec:07:d9:
02:03:39:5b:8f:aa:e3:9e:0a:dd:15:a7:8a:30:2b:
1a:4d:59:b4:e5:68:f3:05:9d:21:dd:55:e2:98:c1:
70:d7:d0:65:91:8d:fe:9a:6e:9f:f1:d3:30:15:68:
e6:31:0a:9e:3b:96:f4:b7:b0:df:86:0c:2c:88:ee:
b2:03:87:1d:a8:93:8e:74:3e:16:f3:c9:8b:8d:fa:
b5:bf:ce:b8:52:b9:8c:46:db:4f:20:03:19:5d:3f:
44:a7:b4:eb:01:89:c9:b0:00:c2:4c:c7:49:c8:fa:
4c:49:ba:79:0c:55:d7:60:1a:a0:17:71:d5:8d:ff:
30:4e:c4:de:02:b9:56:88:46:91:5b:a8:9c:43:48:
6b:8c:12:a2:81:1f:b9:46:6c:af:fb:4b:65:55:ed:
6e:7b:1b:e3:f9:f7:a0:da:18:61:ff:5a:d6:df:75:
eb:0a:87:89:e6:3a:0f:b9:fa:d7:fa:5e:1e:86:c3:
06:30:b2:d5:48:04:20:44:e0:88:c7:ac:11:a2:3d:
62:bf:b7:ee:53:af:d3:e7:3d:4a:0c:20:dc:6e:68:
e7:88:72:9d:93:a9:7a:fe:65:ea:db:b6:3b:93:bd:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:63:33:65:8F:72:38:86:71:2D:DA:F4:99:F2:50:4D:56:E1:72:18
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:58:d6:9e:13:08:11:6d:15:96:c4:6d:eb:55:d7:c6:0b:ed:
af:c7:9a:26:02:bc:4f:07:ab:ba:a2:96:32:b0:f0:2f:ed:35:
78:5c:b5:ed:1d:1d:72:a7:b6:90:00:3a:7c:58:99:b2:61:04:
5b:c5:92:de:4f:48:ab:b8:0f:93:48:68:87:25:2a:55:51:59:
a5:28:53:08:9f:a1:81:e4:e6:4c:d7:11:50:31:08:0f:9c:f9:
9f:ee:ef:c2:fa:6f:c5:b8:99:56:ea:6e:08:f3:19:a4:76:8a:
e8:07:17:87:d9:93:50:c6:0d:8c:3d:6d:71:e0:de:61:98:c2:
cd:5c:f1:9f:a2:ab:3b:aa:63:b2:ff:c7:60:8d:cb:15:43:1a:
ea:cc:9d:17:63:c0:a6:98:1d:0a:74:82:58:07:4a:5b:f8:0a:
75:b5:2f:47:0a:e2:a8:24:87:2c:cd:a3:dc:85:b6:a8:f2:68:
91:2c:34:7b:06:d2:f6:60:3d:09:aa:2d:64:c5:9e:5e:88:12:
7f:e4:28:51:20:3a:ec:f7:ef:15:eb:c6:84:a5:b4:d1:ad:02:
57:f3:3a:86:2f:d0:d1:40:48:14:9d:e3:51:5e:ea:64:08:7f:
6f:bf:d5:4f:ca:f5:bc:7a:cf:30:01:63:9d:d0:7c:bd:a9:77:
9e:23:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:17 2025 by rpki-client