Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: mO+nRnr8NfC9whxuFxEXzt6OjsTQ1jKNofbMidnXsys=
Subject key identifier: 58:69:E2:71:1C:12:07:99:D6:F0:72:E0:03:7B:B1:D0:6D:98:23:10
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 0198D7A906A8E57B0EB5E011EE97B75BD355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0363
Signing time: Sat 23 Aug 2025 16:00:35 +0000
Manifest this update: Sat 23 Aug 2025 16:00:35 +0000
Manifest next update: Sun 24 Aug 2025 16:00:35 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: wMIt3Ajuw8YkL4jHQY9wjdLKjWr8Z+aOpjXXacEb5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:06:a8:e5:7b:0e:b5:e0:11:ee:97:b7:5b:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Aug 23 16:00:35 2025 GMT
Not After : Aug 24 16:00:35 2025 GMT
Subject: CN=5869e2711c120799d6f072e0037bb1d06d982310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:2a:bf:16:18:2f:6c:45:60:d3:28:c2:de:
b5:18:91:9a:0c:ac:8f:2f:55:8e:f2:63:ea:78:55:
1e:f6:ad:5b:22:6c:f3:37:e9:c1:a6:d7:f0:ac:b9:
ff:42:9a:fc:09:2d:8f:84:44:f6:28:1b:7b:6b:8f:
ea:fe:63:0e:ff:02:78:bb:f5:e2:d4:a4:26:c9:23:
06:37:4b:06:bb:a9:f5:cf:62:1a:5f:65:59:06:ea:
83:20:46:9d:21:2c:53:2a:f5:4f:b2:70:cd:36:1e:
1f:5f:42:5e:8a:25:ad:25:c6:36:93:13:68:c0:42:
6f:96:a7:ce:73:ed:9b:cf:bd:e3:b9:42:c0:f6:59:
fd:e9:fe:02:42:98:04:d7:0d:c2:33:f4:e7:aa:d2:
9e:98:5f:96:cf:a8:a1:62:f9:53:31:1a:77:49:02:
ad:05:30:f2:3f:af:e2:3f:45:ec:cd:cd:c0:7e:75:
70:14:c8:80:3e:90:53:92:2f:27:a1:ca:4f:4e:43:
f1:c4:5e:7c:05:d5:69:00:3b:6c:a5:a9:4b:34:3c:
99:e8:e3:e2:7a:59:15:be:d9:60:7e:b1:b2:70:7d:
f1:e7:08:65:40:cf:ca:10:33:6f:bf:21:58:e1:83:
e2:1e:fb:74:10:bf:be:c6:ae:a7:ff:b2:d3:d8:e3:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:E2:71:1C:12:07:99:D6:F0:72:E0:03:7B:B1:D0:6D:98:23:10
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:56:d5:45:bd:be:ca:fe:23:97:30:69:2c:e7:dc:d4:a5:a4:
30:ae:f3:86:31:4d:78:cb:a2:ad:e7:03:54:ba:c3:34:48:12:
3e:5c:11:11:85:58:03:08:86:17:c1:0b:de:98:fe:aa:67:10:
31:04:a2:80:d5:1f:0e:cf:67:4b:80:ce:f8:3d:09:6b:54:21:
98:9d:90:f7:e7:79:a8:a2:bf:01:17:88:83:b5:ad:58:0b:5a:
0f:ef:83:94:13:bf:f4:da:88:85:10:aa:c7:9a:23:1f:cf:65:
95:24:8d:e8:9b:ed:5a:b4:67:9d:1e:ad:0a:a3:65:16:f5:d5:
d8:cd:d2:9c:df:6d:01:d0:18:77:f2:4f:9b:c6:eb:69:60:9e:
69:89:2f:d9:39:9a:28:a0:0f:ad:e3:b9:e6:42:c8:c7:f7:86:
f7:ff:04:d3:41:72:d1:4c:9e:f2:cf:4c:a2:bf:db:b9:92:ed:
f3:b7:40:f3:29:3c:09:4e:7d:f9:ec:b0:10:b0:68:0d:54:70:
cb:3a:e4:60:d0:c4:da:8e:e5:46:bd:ee:d6:b3:17:8b:a0:21:
6f:43:c0:bb:a3:cd:b2:c3:82:31:bf:a8:3c:18:59:59:d0:13:
3b:64:d2:39:8a:5e:53:0b:aa:b4:3f:ea:74:9b:a0:f5:61:16:
33:9b:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:02 2025 by rpki-client