Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: DJrwvgV3Qr7T90/xFr6L8Qt6MjMHhiM6zGjAOoch4ms=
Subject key identifier: FB:E8:D5:B8:4B:23:AA:52:C1:8B:F9:A1:10:AD:30:8F:0E:72:8E:01
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 0198D5BBC085E3FBB66E9A48A4D106B8B6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 38olLkIiBPcMfoQlncHCci+47qCDYCNCdGNsOlC3+rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:85:e3:fb:b6:6e:9a:48:a4:d1:06:b8:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=fbe8d5b84b23aa52c18bf9a110ad308f0e728e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:a6:67:fe:ea:0e:37:c1:e5:40:7f:ef:10:
32:27:e2:e5:68:a9:ac:a4:61:4e:ce:88:00:d1:0c:
2b:6c:f5:d7:93:36:ef:36:f8:da:72:67:af:0c:80:
22:42:59:ee:51:28:ef:f5:af:be:04:20:ac:c7:f5:
78:29:7c:8e:73:75:0e:ea:69:5e:ab:68:e9:bd:3c:
f5:8c:36:21:e1:1e:91:b1:06:f5:37:2a:02:18:92:
ce:99:8e:29:71:ab:62:69:1e:41:b3:fe:29:fe:07:
f0:78:95:fe:a3:3d:8e:3c:6d:a2:97:0b:c0:c8:f8:
35:2b:f0:1a:43:e8:ff:60:ee:dc:f4:13:3a:05:70:
14:31:d3:cb:9c:ac:eb:f1:6a:ae:ec:16:27:df:cb:
c3:0f:0c:16:b1:cc:fc:6c:b6:60:71:32:62:ee:eb:
a8:ba:51:77:6f:98:d1:2d:1c:30:32:8e:90:7a:49:
82:52:93:08:12:72:05:e5:d4:40:3e:68:52:01:c2:
54:1b:89:97:3c:9f:68:c4:01:bd:f4:9a:1e:1f:71:
60:74:28:2b:ed:09:87:ed:d0:4d:6c:e2:cb:25:d9:
7f:cc:98:89:2a:a4:f7:5b:7f:14:bb:af:ae:d1:2b:
37:94:23:29:29:0a:f4:47:fc:6f:7e:48:d2:66:4f:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:D5:B8:4B:23:AA:52:C1:8B:F9:A1:10:AD:30:8F:0E:72:8E:01
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:87:80:3c:b4:54:89:b7:79:84:90:d9:e2:9e:4f:7b:54:85:
b5:29:a7:b1:bb:92:71:7c:f6:4c:99:07:35:7e:cf:88:07:da:
0a:ae:ec:f6:49:c7:72:68:f0:5d:a4:49:ef:94:9e:e9:45:c2:
9a:9c:f9:c0:84:2d:37:59:54:ef:82:ec:b1:4e:cf:7a:06:ea:
7a:86:fd:dd:bd:66:07:bf:c5:29:19:60:15:dc:18:f9:16:26:
f6:38:cd:20:80:59:ca:6c:f1:64:c5:22:36:f4:97:9f:92:46:
8e:2e:bb:49:81:de:13:12:27:65:0e:98:d3:8e:77:03:94:fe:
18:e8:27:db:86:6e:c9:89:36:e4:66:d1:26:2d:8b:4c:18:51:
89:c9:ce:ba:ae:2e:4d:6f:ab:c2:26:ce:28:f9:81:0e:13:22:
30:55:68:08:6e:e5:49:d5:fb:a5:27:df:23:3e:e2:fd:f8:7e:
40:99:c8:25:98:d2:3f:39:9f:95:6d:57:6e:c4:2b:47:04:68:
c3:df:69:9a:f3:fc:24:f4:74:d3:2c:6b:50:c4:91:93:91:60:
b7:95:c2:3e:3b:d5:90:bf:cb:ca:a5:aa:00:43:07:93:01:c0:
87:7f:7e:ae:fc:3c:63:91:f7:38:89:2c:7a:63:61:f6:b4:bf:
7d:d8:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:51 2025 by rpki-client