Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: uY/51d6brhzVHY2FLajAl/syuX3C6WjTu5KVeq3gFjE=
Subject key identifier: 1F:D3:EE:A9:90:05:29:E4:82:96:0A:18:14:0A:9E:77:0A:17:D0:1F
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 0198D54E3EF8DD15A7B4913D3D84CD151DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1529
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: qgGNf2qlxXcF6PcKkIJw1uPkrA2+b8gT2coqml2I73A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3e:f8:dd:15:a7:b4:91:3d:3d:84:cd:15:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=1fd3eea9900529e482960a18140a9e770a17d01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:a8:fa:5c:a0:08:0a:91:ef:77:15:e7:3f:
81:04:b7:9e:16:a9:8b:2f:e3:83:fe:6f:73:d3:15:
be:bf:1c:ef:3c:46:ea:94:11:ac:24:58:bc:da:c4:
1d:05:b1:18:bd:21:a7:6b:ff:81:28:da:bc:d5:cc:
2c:f7:e2:5a:b4:9b:b1:33:7f:9f:b0:8c:93:0d:e0:
92:56:06:54:08:1b:14:1e:58:01:15:da:57:ff:52:
e6:05:a1:76:0b:68:46:fd:6c:e7:27:4d:b7:e3:57:
1d:dd:7f:94:3e:16:e0:72:31:a3:0b:5b:08:39:82:
2c:f9:3a:de:73:c1:ea:bb:47:86:6d:58:52:19:ac:
67:b4:6c:51:2b:5e:43:ae:f6:b3:02:85:23:fa:8d:
bc:66:9d:66:0b:18:11:7e:62:37:42:20:84:c9:5d:
c6:6a:a0:a6:6a:07:09:ea:c4:e2:c6:7d:d7:3f:45:
84:6c:27:e5:e5:fd:b8:8e:cc:7a:95:44:2e:6e:26:
45:5c:c6:d4:d4:5b:cd:6a:03:13:a3:bf:a4:70:67:
56:63:a2:75:81:6e:e2:95:b8:00:f4:65:6d:4c:1d:
6d:c9:e7:f0:bd:01:2f:58:01:8c:52:24:9b:88:2e:
33:4d:fd:d9:1e:08:47:f5:24:d6:06:bf:14:92:d5:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D3:EE:A9:90:05:29:E4:82:96:0A:18:14:0A:9E:77:0A:17:D0:1F
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:38:16:74:40:4e:c3:13:99:1a:55:99:fa:e6:b7:22:92:be:
a3:1d:8e:44:6e:7e:5f:39:ec:6a:ba:c6:d1:5c:d4:ac:b8:86:
61:d3:96:66:12:77:72:74:bb:27:01:e0:15:3f:fc:3b:07:1f:
85:b0:f4:24:19:5f:5b:87:4b:3b:0a:72:28:99:52:ee:3f:c6:
03:25:c8:c6:cc:45:31:77:10:87:e2:39:79:3d:11:ac:f5:2b:
68:9a:33:85:eb:3e:2c:e8:4f:91:68:8b:3c:c2:00:06:7b:0a:
86:c6:d4:8c:3f:4d:9e:50:cb:1d:c4:2c:94:72:21:62:c4:03:
58:99:15:34:fc:ae:a0:65:16:26:5e:2f:97:b0:24:5c:e3:98:
7a:d7:52:a2:f0:69:82:94:00:ed:e1:70:b7:16:b6:ab:8a:64:
06:53:ae:db:5e:88:02:12:c1:4e:62:c3:54:6b:90:39:8a:ef:
9c:65:34:ad:48:07:60:a5:5e:b2:8e:d8:9b:b9:e7:e7:d5:5d:
e3:dd:14:e6:6a:f8:a6:9f:62:b7:a3:9d:c6:af:3c:d1:20:6b:
63:9d:3c:21:70:3a:c7:f0:12:1c:bf:68:16:f6:dd:12:7b:f7:
b1:f0:6e:a9:ab:d5:2b:83:bf:56:a6:b2:62:2e:42:08:ed:22:
37:6f:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:50 2025 by rpki-client