Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File: lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier: WA5USP5be+bfPxMK99E42Fq5lYlDK4S2JkivlIzlhok=
Subject key identifier: 33:39:43:3F:ED:E7:5A:66:B2:C3:33:51:04:32:22:1B:24:64:9E:5B
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial: 0198D4E039EDC779B77B2DD90C99DA78F390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number: 34
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: k1Xc3mWeEmmCaFh4ckEWpLNdpb4.roa (hash: GH7ewlueeqCkKF8FdnLHf1UDx0BAMbcdhJEt7chNpzU=)
2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: w5o+XKVPLcIL2r1hDqdHjxSJyiiVvZqrC26d7muYfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:39:ed:c7:79:b7:7b:2d:d9:0c:99:da:78:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=3339433fede75a66b2c333510432221b24649e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:85:4e:f5:be:32:7c:46:07:ce:c7:8a:39:
d6:12:8b:15:dd:f3:0d:4e:7a:58:35:b2:4d:39:94:
65:4a:1e:8c:95:da:bd:6f:c4:53:05:ae:56:fa:e6:
e6:da:e6:57:65:de:be:98:7f:82:98:6f:c7:a2:7b:
14:8e:0a:4f:4d:d9:aa:59:11:df:65:12:55:df:f7:
65:37:58:02:c3:61:14:65:f5:f7:b8:ae:57:5e:38:
93:ea:0f:16:21:91:1a:a5:57:01:25:25:1e:b4:df:
3e:2f:12:40:91:43:16:44:3c:e1:e9:4b:97:4b:77:
d0:39:83:ea:3e:7c:2a:4b:7f:6f:24:65:5c:25:c0:
e5:f6:00:13:fe:5e:51:f7:66:03:5a:05:61:35:46:
3f:f9:35:f1:0a:05:0b:ee:f6:8c:07:5f:b6:8d:ea:
c9:86:fa:42:57:e9:91:bd:00:56:f8:2a:9a:b6:a5:
99:88:31:b4:a4:7d:d8:06:b7:2c:ee:01:e0:3c:d6:
1f:83:54:81:f1:c0:1b:2a:c3:2f:5c:48:1f:54:0b:
b5:60:ef:35:5a:9c:28:00:ea:f9:4b:e9:69:ab:17:
58:bb:f2:29:ee:57:da:f4:27:9f:fc:00:d3:19:31:
5e:cc:77:56:1a:82:d6:8b:a2:77:f7:b9:32:80:49:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:43:3F:ED:E7:5A:66:B2:C3:33:51:04:32:22:1B:24:64:9E:5B
X509v3 Authority Key Identifier:
keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e8:18:e7:85:33:0c:13:e0:24:3a:1a:d8:2e:3c:63:02:cc:
b5:f7:3b:72:46:04:f4:cf:f7:ad:89:e0:fd:fc:f1:c4:99:55:
a0:6a:c6:47:95:fc:be:f4:49:dd:22:fc:9c:2d:d2:06:48:ac:
5c:6c:ea:5c:40:e6:83:81:3d:f4:e1:03:79:6f:0c:98:04:58:
32:67:ab:42:59:eb:10:65:f9:e4:ec:5f:c6:fb:5b:81:02:cc:
b4:f6:86:6c:44:5f:e0:14:5e:f5:ec:cb:ca:cf:f5:2b:ca:ce:
66:e6:d5:4b:1a:89:9a:c0:e9:4d:d3:eb:87:20:f9:b4:d5:a3:
b4:e7:6c:91:7d:70:c3:0d:2a:aa:5d:c7:45:72:de:fd:cc:dd:
d8:8b:cb:65:13:fa:37:21:48:f2:86:ea:64:37:5f:85:60:b2:
38:65:97:23:30:00:77:6b:4e:10:7b:62:14:20:5f:3b:b0:20:
cf:e8:a8:5c:05:56:a1:cf:a4:54:d1:49:34:9f:d7:97:e9:f7:
91:bf:4d:35:2b:6d:0a:02:54:94:17:0c:7a:7d:0e:82:b7:ff:
51:eb:31:6d:c5:2f:51:7c:51:8a:d0:21:1a:f6:e8:29:df:6e:
cf:a0:c1:f8:3d:e3:0c:bc:22:6f:b8:70:47:d4:50:07:a0:40:
b6:22:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:09 2025 by rpki-client