Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: IZfLWssNv5qAehupxyehdffrYkMKvaka+bZBQ77Myuw=
Subject key identifier: F7:DE:6D:98:53:7A:61:23:54:F5:F8:E1:4D:6D:D9:CB:BA:BD:D8:1E
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0198D4DFF32FDEA4B29C12F2DEE121D2BE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 08C9
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: SIbuYmrS7hN7AetIYwQhmp6xy5Y+Px7NtYbYXxiqcXg=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:2f:de:a4:b2:9c:12:f2:de:e1:21:d2:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=f7de6d98537a612354f5f8e14d6dd9cbbabdd81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:be:08:07:54:6f:3c:d2:e3:85:5c:b3:5c:
75:07:bb:be:bd:30:69:d7:7c:6f:83:de:8f:24:91:
71:88:0c:88:3c:03:38:5f:f9:33:d1:d9:29:7a:86:
9f:8c:d2:1c:31:ec:71:c9:c5:f5:7a:46:26:ab:4f:
39:50:05:60:1d:d2:4d:90:0f:ae:bd:9c:92:38:15:
63:5d:28:eb:6d:9c:67:d2:9d:4a:62:41:de:38:c4:
94:44:bc:a7:86:07:79:12:52:c9:30:0d:84:8f:68:
ca:09:f2:c1:71:c8:3b:62:ba:19:ea:71:7b:3e:22:
ce:f7:9e:65:c4:72:ec:7b:a3:f4:53:07:1c:dc:6d:
86:41:79:f1:e0:ce:22:6e:91:e3:30:01:bb:b4:5d:
6d:f1:26:5a:e1:82:55:4e:d9:3f:b7:39:2e:35:49:
47:a3:d8:09:5f:c0:42:f2:7a:c6:9c:f0:ab:3b:a2:
e2:e2:ca:b9:74:90:33:50:cc:c2:37:96:32:87:b5:
a1:60:0d:d3:a3:b2:04:84:89:6b:b3:bf:ea:86:9b:
b6:b2:f8:40:31:39:56:c0:e1:42:04:1f:e3:8c:a5:
3e:6e:86:09:d5:7f:92:7f:5d:8f:a0:b1:c6:be:b7:
fe:28:9f:3d:27:cf:8b:b1:d7:37:26:e3:62:c0:42:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:6D:98:53:7A:61:23:54:F5:F8:E1:4D:6D:D9:CB:BA:BD:D8:1E
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f2:10:1b:b2:e3:af:4e:f4:6b:d2:c7:be:11:8c:0a:df:bf:
29:da:c3:00:21:52:c1:8f:1c:42:99:a9:b9:dc:c1:dc:cd:fe:
34:a0:5f:ec:b3:35:8c:29:99:6a:34:fa:bf:4d:54:3e:ba:04:
a0:af:c7:83:40:ca:f0:4f:32:fd:12:5d:87:25:12:74:e8:f8:
fe:67:7c:38:d2:db:18:b5:70:65:8e:75:e4:bb:56:55:fc:10:
74:33:e7:ad:03:0c:13:f0:a4:da:f1:00:ab:40:6d:d2:de:1a:
9e:63:88:96:8c:40:96:2d:5b:a5:3a:a7:6d:52:40:f3:3d:fb:
c1:5d:2f:5e:13:33:70:a8:c2:d2:24:f7:3c:28:2a:12:7a:42:
45:18:a7:55:d3:78:90:58:35:ba:03:0c:1e:8c:66:97:24:25:
c4:ee:f4:9a:45:2f:a6:bb:32:50:64:af:95:bc:cd:8a:29:fc:
85:60:b0:4e:6a:e1:60:6e:25:ed:d1:47:5e:70:88:00:4a:02:
86:1f:35:0e:71:8a:74:5b:91:bf:92:b0:96:c9:b4:4b:43:7a:
57:ed:14:aa:8e:a7:8f:4f:93:fe:19:e9:cc:40:73:3c:0e:b8:
33:44:69:db:5c:29:06:9d:21:9e:12:7d:5b:1b:85:56:61:a9:
3e:e0:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:49 2025 by rpki-client