Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: N25VGg/FoHimav0UfhnnFkQku1tEV5atPG0JoGG8dmU=
Subject key identifier: FF:0C:77:9C:02:9B:51:77:87:06:EF:06:58:72:0B:A6:38:30:E6:DD
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 0198D5BC6231148603B5D09A53A96458A74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 1070
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: K49jacHFUqOPC0wbLQoAdtpVUeFxcQRx/vhDYv2umLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:62:31:14:86:03:b5:d0:9a:53:a9:64:58:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=ff0c779c029b51778706ef0658720ba63830e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:fb:57:85:3a:66:4a:f5:42:22:a7:b2:34:
9a:c5:1b:7f:67:74:63:6b:8c:0f:d7:9a:f3:fe:2b:
f7:80:3b:c5:3a:e3:5b:31:cb:1a:a9:12:6f:f8:3e:
ff:05:ea:38:e5:68:72:c4:9c:43:14:77:08:52:63:
07:08:29:f3:d2:94:c9:b4:5d:cc:09:2f:be:e2:61:
79:4f:b4:53:f2:2e:75:8d:73:c0:84:95:53:39:ad:
f9:e3:eb:42:73:d1:21:ce:bc:13:4b:56:b1:f3:39:
40:6d:3e:a6:1a:57:3b:74:93:28:14:f2:4d:22:e9:
5e:51:cb:51:4d:61:a1:1c:8a:da:04:a9:69:a5:b2:
ea:65:9d:47:6c:d3:cf:68:93:7c:3f:37:45:56:c9:
a1:0c:f6:e1:fc:77:33:02:21:80:53:5a:4f:f2:13:
f0:ef:bb:fd:a3:1b:cc:9b:84:23:e1:cc:a1:4e:a4:
df:53:52:38:80:4c:67:32:3e:26:1b:8f:8c:41:0a:
53:e0:b8:af:1b:e4:63:cc:a0:29:db:6b:27:19:9f:
da:0b:16:50:39:15:01:4c:c0:a6:04:ea:a4:da:95:
9f:77:a3:43:b9:5a:dd:91:23:a8:b8:d0:d8:16:62:
c0:6e:7f:34:12:f4:c7:e4:a9:77:27:3e:cc:1a:e4:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0C:77:9C:02:9B:51:77:87:06:EF:06:58:72:0B:A6:38:30:E6:DD
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:4f:04:d9:a9:ae:66:dd:90:8c:e0:30:62:21:cc:76:e4:
4f:d9:b4:4a:48:86:da:51:a8:6a:ae:63:45:78:87:ba:45:75:
0b:c6:9d:d5:2a:32:bf:a3:c5:2b:ee:b4:78:33:84:ab:d1:c8:
45:bd:ef:87:34:0d:24:cf:ce:38:36:a2:48:5c:ad:ca:ab:08:
3c:cc:2d:99:86:92:ce:bf:9d:fc:c2:59:fc:fe:a9:70:a9:30:
e0:75:06:3b:93:e9:14:d8:03:11:4f:62:ed:64:60:f9:64:dc:
2a:c0:38:9b:3c:03:d3:19:ee:63:8c:a9:f1:2e:e9:49:f9:64:
ba:72:b1:c7:56:58:9b:be:a2:3a:8d:20:eb:09:21:95:1c:0b:
36:4a:6c:9b:cf:38:b4:85:65:36:8e:25:71:2e:b5:ae:ac:d7:
76:39:a9:81:1b:cb:49:af:e0:20:a6:e3:7d:d2:09:4e:1f:2c:
47:68:92:bd:cb:ca:cf:1a:3a:83:62:e0:81:15:72:a4:0b:ce:
a0:0b:9d:95:5c:16:80:bc:4e:43:85:4d:e1:42:61:d9:34:dc:
a2:f7:1b:b5:85:d6:83:53:3a:f7:9e:80:70:0e:a3:9a:29:df:
87:37:c5:e1:95:6e:07:b0:ba:72:20:32:7e:af:b5:c8:1a:5d:
40:e0:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:17 2025 by rpki-client