Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: LxB7yUBSfz4e10dVKSc53067npmRRP4I0CInpiNx6pY=
Subject key identifier: 87:32:EA:09:84:D0:3C:6C:87:EA:EA:5A:51:60:4C:A6:46:99:54:14
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 0198D960B5B79F62052FF87FA41AC84FCCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0236
Signing time: Sun 24 Aug 2025 00:00:50 +0000
Manifest this update: Sun 24 Aug 2025 00:00:50 +0000
Manifest next update: Mon 25 Aug 2025 00:00:50 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: LcmLgFaWUNz1U+I/Pb27a8A0p84ocRq0WjuCvs5BrS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:b5:b7:9f:62:05:2f:f8:7f:a4:1a:c8:4f:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Aug 24 00:00:50 2025 GMT
Not After : Aug 25 00:00:50 2025 GMT
Subject: CN=8732ea0984d03c6c87eaea5a51604ca646995414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:7e:24:65:cd:37:26:1d:9f:ab:7c:10:91:
7b:83:56:9e:6d:b6:78:79:b9:38:77:5c:29:90:b1:
3b:fd:37:16:5f:56:cb:20:14:9d:f8:c7:b2:cc:4c:
9b:9f:80:92:9e:7d:4e:20:b7:f5:ee:6c:d0:37:d0:
98:8e:e3:8d:cc:7f:db:22:2c:38:ad:76:bd:0d:f3:
ea:71:97:f8:b1:f9:fd:6c:02:46:cf:be:ae:7e:fc:
90:cb:c5:c2:15:71:bb:86:e2:6b:0d:10:f3:a2:62:
d6:c9:ea:ad:d1:14:64:c2:c5:14:91:d5:11:94:28:
fb:81:94:03:08:73:6b:9f:3b:8d:df:81:a0:68:29:
94:9c:37:80:1a:e0:5d:24:90:f3:f9:af:fc:46:66:
ef:89:d6:d8:ff:b9:0b:29:f0:56:2f:70:ea:ee:0c:
ca:57:72:41:13:19:81:27:7c:98:07:5c:99:4b:d2:
87:51:77:f7:ec:0d:4b:8b:36:b6:d1:5d:40:28:74:
e2:9f:5a:0b:d7:7a:0e:ce:bc:6a:97:ef:8c:d8:f6:
b8:97:d2:d9:d1:eb:7f:82:64:02:b2:a3:aa:e8:dd:
c8:95:8b:48:b4:be:7d:a1:93:6e:a2:47:a1:a7:a6:
96:10:93:22:80:db:9f:bc:8a:df:a9:45:7e:ae:2a:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:EA:09:84:D0:3C:6C:87:EA:EA:5A:51:60:4C:A6:46:99:54:14
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d7:ba:bc:e2:14:39:69:cb:47:2f:f5:15:80:33:47:ce:06:
73:77:77:70:d3:b4:54:8c:1c:75:14:0f:1c:84:4e:02:27:79:
77:6a:fe:c1:dc:4d:a1:56:8d:ae:50:1f:14:61:64:95:8e:87:
e7:90:69:0f:db:bc:fb:1b:ed:2e:a0:0d:e5:dc:0d:34:ec:2f:
3a:41:61:ea:1d:40:07:b6:8b:a7:ba:a9:9b:b6:ef:ff:57:9c:
78:e0:a7:dc:0b:a9:29:be:20:a2:0e:87:1f:bf:7f:19:71:10:
b7:8e:ed:f0:24:53:7b:75:9c:44:af:16:e4:64:1b:09:76:bf:
91:33:53:3e:84:57:87:3a:ed:7a:f4:8d:70:14:7b:52:30:03:
63:5b:2f:bc:02:02:2f:6b:b1:de:09:61:5a:95:8c:e0:87:cb:
10:72:b7:f0:65:ea:b3:80:84:8e:ee:08:5e:e9:aa:80:f6:74:
2d:63:e0:96:1a:ea:de:ae:ba:4d:c5:74:16:31:8d:d7:33:74:
b5:01:c7:47:35:bd:1e:57:6a:28:40:d6:ba:17:24:9c:5f:ae:
2e:e3:35:c7:fd:64:bd:66:1c:b7:8f:58:71:94:99:db:62:47:
5c:84:4a:0b:5c:ff:ff:a9:10:93:ce:10:11:66:1b:9e:f7:7f:
f9:20:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:19 2025 by rpki-client