Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: RKsi9usZbxO68z4vtxLxoSVxQtphT+GqFSYWZ+wrRZg=
Subject key identifier: 3C:DA:E8:B9:81:F4:7F:CD:6C:66:BB:C9:1C:0B:CC:B0:A7:57:8A:9D
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0198D65FCCEEC41A583B6565509D9BCD681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: 9BPuPzj5BfRQ0VSj1ib7Fr/y0l2m7tEibwOIXRgsFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cc:ee:c4:1a:58:3b:65:65:50:9d:9b:cd:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=3cdae8b981f47fcd6c66bbc91c0bccb0a7578a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:8d:0e:7c:02:b0:0f:a9:5c:90:fd:6a:67:
4a:f1:f7:6a:08:b7:66:65:db:b9:ef:32:74:12:6c:
ff:9d:ee:c9:48:44:fd:2a:ce:65:48:3b:0a:a0:27:
09:d6:6d:31:e8:11:5b:04:60:ff:0f:72:97:ed:bf:
1f:85:57:79:e3:c2:ba:06:3e:36:4f:21:46:9a:74:
fb:95:96:1b:9b:d8:a6:9c:71:c0:35:cc:d9:ff:cf:
0c:15:50:b8:9f:6c:b3:de:98:d0:9f:e0:e2:37:95:
6d:90:f6:3f:99:80:d2:15:28:c2:d1:e7:4e:b6:73:
13:50:c7:ec:89:0e:d8:42:0b:ac:d3:6d:c8:bd:7f:
f3:41:83:17:0e:17:f3:0a:dc:45:72:65:f8:58:b6:
97:14:ea:22:09:fe:d4:d5:f1:22:f9:be:ce:f7:51:
bd:a0:99:d5:63:8d:11:4d:da:d2:7d:21:12:55:39:
f1:42:7c:18:5a:e5:86:88:e6:c3:4e:8a:67:ff:95:
79:e3:1e:00:14:72:13:3b:dd:e9:03:f2:55:d8:d4:
cd:39:72:7f:4a:03:49:6a:f1:05:dc:20:f5:eb:2a:
28:24:4e:61:9d:14:90:fa:4d:62:1b:55:d7:bf:2d:
b4:07:06:32:90:9a:74:f8:f0:b2:5a:aa:f3:e4:6f:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:E8:B9:81:F4:7F:CD:6C:66:BB:C9:1C:0B:CC:B0:A7:57:8A:9D
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8b:ec:1f:ae:f2:18:58:7a:0e:ff:c3:e8:77:58:95:0f:e9:
7d:39:74:56:e1:bf:fc:93:21:d7:d6:b2:46:db:57:a9:f7:68:
e7:ee:88:33:01:c3:bb:52:6d:4b:ce:22:2b:45:cd:45:c0:12:
f4:e6:66:27:fd:dc:09:01:db:41:a0:09:67:47:db:0f:f6:3c:
c2:52:11:53:83:d3:b0:f2:7f:d5:45:4b:c7:4e:b7:d5:a3:9b:
0a:e5:0b:39:df:2c:10:79:2b:06:89:f2:fe:21:3c:b8:48:cb:
e9:3f:1c:83:fa:58:a9:3e:19:01:54:a8:55:51:f3:f7:47:1f:
64:33:a0:f2:bc:19:f6:4c:cf:7a:13:6e:39:45:c7:2c:0b:eb:
46:83:31:8d:f5:6b:84:da:7a:c9:e9:3f:fb:b4:b1:44:db:52:
b7:2c:9f:a7:d6:28:77:c7:34:5c:41:57:1b:24:a6:ba:2e:04:
0d:1c:f2:9b:2b:e3:48:df:4c:e0:45:82:b8:68:91:7c:a6:b2:
9b:7c:f8:14:6f:9f:c0:6a:48:dc:09:5f:65:c5:44:cb:c5:d0:
bb:92:23:b8:a4:38:5f:d4:53:d5:c1:14:31:c0:86:b4:b2:33:
55:39:7c:0b:1c:c1:8b:a4:84:c6:21:cb:a5:e2:63:ed:44:27:
c0:b0:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:12 2025 by rpki-client