Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: 3in0oMXk637l2NzwK/GXjeT9XQwh7SDmXERmB2Djjfw=
Subject key identifier: D2:5B:2A:E3:B4:CD:75:67:AE:38:D3:D8:1E:21:6B:DB:5C:0D:04:CE
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 0198D47363470E88C59F9B0BE86CB7CC8DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 028B
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: DaaSVrWaTRXsgOE2E28QYGBSuPHbBeE3O7cglEmEP5k=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:63:47:0e:88:c5:9f:9b:0b:e8:6c:b7:cc:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=d25b2ae3b4cd7567ae38d3d81e216bdb5c0d04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:21:90:ab:aa:e2:af:a9:2a:56:ea:22:2e:
4c:13:e0:8d:0b:9c:61:70:27:e5:75:41:bb:62:ea:
38:7a:12:c6:b1:e9:5a:20:8d:9d:ea:38:99:1a:ba:
d0:0d:76:12:f9:09:4f:73:45:fb:20:79:ba:89:18:
d3:5c:e3:e1:e7:c9:56:7a:63:b5:06:b8:51:be:cf:
0b:7e:56:c6:bf:1a:6c:b8:a8:20:b2:3d:3e:e5:98:
e1:9c:7d:d4:0f:57:80:94:b1:95:4b:ed:f9:6b:27:
89:ba:31:84:67:b3:91:53:d6:07:5a:7b:e1:80:59:
5d:ba:07:13:04:a9:e2:a5:1f:a9:d0:83:57:c1:0a:
d4:90:8d:05:86:45:a6:10:ce:eb:26:59:fd:92:b1:
c6:3a:4a:35:1c:0a:b2:e1:02:d0:10:0f:b9:e2:22:
c6:1a:d9:42:81:74:00:10:34:89:98:ac:e2:28:33:
fc:f6:f0:64:a7:ba:65:a1:19:ff:fe:17:6c:78:ff:
af:af:c3:19:05:38:c9:76:f0:e7:c1:76:58:ac:5f:
c4:5a:3f:c9:13:ec:f3:3b:6c:69:66:b0:48:51:4c:
21:30:3e:90:fd:a1:9a:a5:95:96:d7:59:c6:49:f1:
6d:09:4f:51:ff:a1:e5:19:97:40:35:ff:c9:8a:27:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:2A:E3:B4:CD:75:67:AE:38:D3:D8:1E:21:6B:DB:5C:0D:04:CE
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:84:d6:9e:80:a7:cf:a7:3c:35:06:cc:cc:77:8e:37:ca:90:
2a:50:46:bd:cc:4f:54:63:f9:2c:fc:b4:70:b9:cf:e9:b7:c3:
6c:6e:83:dc:87:d5:75:cd:f3:51:1f:5c:fa:46:4f:b8:28:f2:
71:04:aa:68:7e:7d:53:a6:13:db:60:c0:d0:3a:e8:e2:3b:e9:
b7:f9:ae:59:08:bc:d0:a3:44:02:95:62:b7:98:8f:81:8c:b4:
d2:2d:fc:e9:a8:8f:cd:eb:62:72:5a:5a:8e:a4:a7:af:50:90:
d5:04:d3:88:11:c4:4a:4b:b0:de:ac:59:98:46:fa:c8:39:dd:
8b:ce:7e:80:4a:7e:73:5c:a6:44:4b:00:30:3c:43:db:38:b7:
d9:21:14:b1:55:8b:15:b2:57:1b:ca:52:38:e0:0d:16:b1:1c:
65:9b:ce:8f:0f:30:90:08:78:a5:ce:c7:14:13:05:eb:94:65:
e4:76:87:a3:f5:6a:13:5e:d3:09:c0:30:95:85:ee:c5:34:04:
52:9a:2d:c0:e1:5a:74:fa:ff:30:fa:b1:24:15:b1:a3:2e:c1:
2c:05:0e:57:72:dd:3f:79:92:cf:00:eb:77:e4:5a:12:57:ec:
73:a7:54:3c:89:42:e0:b4:1b:77:63:2d:b0:03:61:2f:9f:0a:
5c:75:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client