Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: 6vXyXL4R6y5bdf5zfQjm7yy8HwJTVnbh5rXTdyWsIfo=
Subject key identifier: B7:17:B7:68:4A:C9:60:EB:9B:8C:FE:F1:11:44:9A:66:8B:C9:64:53
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 0198D6CCF39200A3665C31DA5C599E78D395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: OW/rOybZ/CczXFgrXCzNrRXR0ysPGRS1sci2EoGFIZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f3:92:00:a3:66:5c:31:da:5c:59:9e:78:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=b717b7684ac960eb9b8cfef111449a668bc96453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:e8:5e:4e:9d:15:59:cb:5a:0b:2f:c4:1b:
ac:f6:1e:76:2d:dd:b6:64:46:39:2a:b4:0d:ce:aa:
0d:f5:89:32:db:f0:1e:92:3f:68:44:cb:eb:16:19:
55:9d:44:c4:40:d3:4a:96:d2:57:b9:00:68:63:98:
67:5b:b9:fb:ab:ad:f5:6a:1c:0a:28:9a:d9:b7:d8:
51:b9:14:2c:69:1b:44:5a:ab:bf:07:f7:7e:4d:dd:
96:da:48:75:57:dc:97:ba:53:02:2d:a3:51:83:95:
94:be:8d:c3:5d:c2:65:88:17:ac:3b:ad:db:26:8b:
99:44:5b:8c:c5:c2:5d:e5:65:8e:30:3c:2a:11:82:
87:25:72:35:21:9b:e3:c9:2b:93:24:33:95:3f:7e:
31:48:6b:52:52:6c:4c:d3:d2:34:15:51:6c:5e:72:
0c:59:4a:bf:f9:20:63:5c:1c:16:55:22:2a:f8:de:
95:03:99:8b:08:4a:86:38:e9:8f:5f:4e:f8:20:35:
2b:58:04:7d:98:dd:1b:57:70:7d:1d:c2:4e:9b:f0:
51:4b:5d:61:d4:e0:53:ed:14:38:a2:9a:3e:21:eb:
be:cf:79:0d:63:f5:52:5f:16:7c:fd:99:25:99:15:
f3:a2:f7:05:35:2d:13:53:69:18:ba:98:a6:57:aa:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:B7:68:4A:C9:60:EB:9B:8C:FE:F1:11:44:9A:66:8B:C9:64:53
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:20:d2:33:fd:fe:37:2b:b3:23:15:9c:c8:d1:7d:16:ef:
6f:ba:f7:8f:59:47:c3:33:0e:c0:bd:94:52:89:49:65:49:17:
dc:f0:f9:40:6d:f1:01:03:48:a1:c8:9d:bf:bf:34:47:5d:fa:
05:b0:dc:e0:7d:57:d5:86:f7:31:2e:69:b8:f2:14:a7:66:c7:
f0:a7:cb:34:16:44:0c:37:80:89:64:87:5b:5a:9f:76:d0:88:
cd:18:6a:b9:aa:72:7c:30:ff:2d:26:41:ec:d1:99:71:4f:d1:
5d:54:64:41:04:e3:6f:95:aa:c5:9c:be:c7:c3:a6:e7:2d:80:
6b:4c:97:0a:50:67:06:d6:7a:67:2d:ae:77:1f:6e:ea:7f:36:
e6:d7:df:38:98:4c:12:6a:b5:77:c8:68:23:15:54:dd:f4:a4:
60:c6:d4:fd:13:f5:27:18:5b:58:d3:f5:b4:10:39:17:cc:75:
18:57:7e:08:fd:2b:d2:40:2b:3f:01:52:7b:b0:70:d7:55:4f:
b7:bf:2c:3d:9e:b8:47:ca:42:a0:10:69:8b:da:c6:7a:fb:cf:
e7:51:a8:b5:45:8d:67:c4:65:22:58:06:d4:3a:fd:8d:82:9c:
a3:14:7f:12:1e:11:bc:56:49:c5:a8:69:9d:2c:eb:d2:7b:a0:
17:7f:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:21 2025 by rpki-client