Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: v4mkN5PGwVp2owg/hv2rWLx7RX8YzWOINSMfqwJcJsw=
Subject key identifier: BB:B1:86:A7:5C:23:B2:0D:2E:D9:FE:3F:A3:5B:E9:47:5B:88:0D:A8
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 0198D65F14C64507D7111F92808590674337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: OzXuxURJCU/RJXa0+sggJGGsS4XeLcResI2xxf1JR6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:14:c6:45:07:d7:11:1f:92:80:85:90:67:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=bbb186a75c23b20d2ed9fe3fa35be9475b880da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:05:63:cb:fe:cf:9b:51:29:40:62:4c:c5:
a9:57:06:64:b6:29:35:2a:23:be:99:73:f5:9c:3d:
7e:35:40:d5:d0:f9:73:6f:1e:98:ef:7c:b8:c0:1c:
58:18:b2:81:c8:80:0d:0f:73:ce:50:fd:57:3c:34:
f5:72:3d:e3:6e:84:ff:70:d5:7b:fd:8d:a6:31:d9:
2e:7b:c0:08:f1:0a:de:5e:0f:4d:d2:0a:3e:db:6d:
7f:d5:94:d7:bf:0c:41:8b:2e:5d:d7:f0:24:f3:dd:
a3:a1:c9:95:0a:ab:38:11:6c:25:a1:c2:ac:e9:31:
b8:16:30:02:1a:2f:14:6a:d4:da:7c:38:b0:d5:a9:
73:9b:6b:ee:fe:79:05:bc:b8:d0:1f:35:8d:72:d2:
d6:56:2c:68:7a:96:45:d2:ba:b9:fb:22:24:ab:48:
41:34:23:af:f6:37:39:da:b0:e8:60:e5:15:eb:a8:
59:b3:91:7a:86:bf:ae:28:3a:29:57:9b:6f:5f:95:
a5:54:ee:fc:b3:cf:3b:77:b1:5f:36:2a:21:ed:62:
b2:7a:4e:20:73:eb:71:30:b6:ba:06:4c:ce:8e:6b:
59:e9:79:bf:9a:6d:f8:71:44:99:d1:ff:b0:93:74:
a6:c1:1f:56:15:6f:62:83:62:7a:2d:c0:5f:f0:f8:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:86:A7:5C:23:B2:0D:2E:D9:FE:3F:A3:5B:E9:47:5B:88:0D:A8
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:31:b4:74:99:fd:6b:a6:e6:98:74:c1:1f:e3:b0:df:d0:03:
0a:a3:26:cc:ad:b5:3a:5a:6b:13:38:21:b1:37:b3:5f:91:e3:
9f:15:84:60:29:f1:cd:41:b3:df:88:68:b6:69:8a:e7:a7:27:
11:f8:a2:62:b5:36:b1:a8:72:78:2c:26:17:d1:f6:21:91:77:
d7:2c:94:f2:53:21:8a:9d:fb:2a:35:02:39:5b:bd:a7:82:cb:
da:a2:02:7c:94:a1:6e:75:8f:df:cf:ea:3b:5f:c7:d7:8a:c1:
b0:fa:32:7d:eb:fc:e0:88:22:2a:9a:44:a7:79:23:9a:9e:3c:
a6:cb:23:dd:3d:07:3a:ac:c0:b1:a9:4d:6f:ce:b8:87:81:71:
a0:1f:d8:d1:bc:c7:82:c2:fc:da:31:d6:2f:92:bf:15:34:07:
fb:fc:84:97:5f:b2:ed:81:bd:74:e0:5c:be:f4:98:24:b5:f2:
f7:25:6c:75:25:22:df:b3:11:68:8b:7f:9a:cb:1d:df:9a:fd:
1d:bf:f2:3c:42:a9:13:a4:75:cc:d8:34:99:4a:7e:0a:c2:a3:
a7:fc:3c:ac:45:5f:50:de:68:50:e7:e3:c5:3c:4b:0a:a5:4a:
38:9a:8a:22:ca:10:f9:17:29:32:d3:37:37:a8:1b:c3:32:c1:
9d:c0:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:10 2025 by rpki-client