Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: IZEbdxCP+gQ0MpjEbr4OWID/5Uchgn3qJ0KgCIW/2VA=
Subject key identifier: 18:E4:A0:16:D7:06:33:7D:BF:38:93:D1:8E:27:D9:4B:3A:5B:8C:5F
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0198D472915F769D5382A4804D0F39790A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 0425
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: ZFKraZA5SDL7mIPTk5jcWDgN80wpVz9H1eYPUpsRrhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:91:5f:76:9d:53:82:a4:80:4d:0f:39:79:0a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=18e4a016d706337dbf3893d18e27d94b3a5b8c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:2e:34:8e:13:a9:6b:17:b9:06:25:61:19:
32:35:c3:9d:88:02:d6:b9:84:ae:3f:7e:f8:2a:4d:
c7:f5:2d:3a:8a:14:c4:5f:35:7f:6d:8e:4a:f2:eb:
d7:00:1f:60:f6:a5:c3:84:92:98:39:e4:13:ed:76:
8c:06:0f:58:ee:e9:fe:e5:a8:43:d0:5e:c8:51:54:
78:51:af:80:38:6d:70:89:ee:43:db:a6:0b:6d:34:
8c:eb:ba:c7:46:a4:61:37:40:a8:c3:f6:a0:e1:68:
d3:7d:0c:f7:b9:e6:cd:4c:a8:e7:5f:bd:84:e0:2b:
6b:6d:6c:53:b8:53:f9:8f:0b:32:b4:97:04:4c:f7:
51:df:d4:fd:12:12:40:83:51:28:c7:3f:cc:91:57:
c9:5b:6b:61:e4:e8:30:80:ad:73:a7:cf:d0:23:c2:
fc:94:31:c5:a5:61:3e:c3:9b:8c:2d:1a:2d:37:5d:
a0:5d:fc:1b:74:b0:7d:50:7c:01:05:13:b5:d4:9e:
33:68:f8:3e:a4:7a:a2:c9:f9:15:57:ab:86:67:b3:
25:51:e2:db:18:1d:92:0c:d0:07:1c:13:fe:f1:c5:
2b:d8:cb:42:36:2f:16:df:53:a5:c3:3d:fd:49:04:
d6:1d:80:21:f0:1d:d1:05:ca:fd:11:58:60:5c:92:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:A0:16:D7:06:33:7D:BF:38:93:D1:8E:27:D9:4B:3A:5B:8C:5F
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:9c:ca:3b:97:e9:7e:59:42:eb:16:fe:95:17:cb:a9:ab:
f8:2f:5d:63:19:2b:42:e5:6d:73:dd:fa:49:ef:e0:47:32:8c:
c1:af:28:a3:29:2e:be:0e:14:74:3d:cc:71:4d:68:fe:c9:3c:
18:0b:81:35:05:c7:60:15:d0:62:61:7e:b4:46:a7:43:e0:da:
2a:ad:6a:60:16:7b:fb:9b:aa:dc:80:89:a7:95:d0:32:68:23:
6e:79:d7:bd:96:d2:89:39:b4:6e:35:68:06:4d:96:a5:8e:7d:
a3:a6:77:73:c6:a1:f1:18:17:16:44:0b:25:fb:c8:85:a8:81:
8f:63:e6:75:e3:4c:a7:3d:82:b4:69:b4:50:9e:0f:7e:f5:74:
f6:06:7b:2a:f8:ca:99:5b:80:c6:1e:f0:42:45:be:5c:1f:60:
3a:6c:41:2d:b2:72:56:5a:8d:b9:4e:f9:2d:39:ee:52:b9:6a:
d6:06:85:0d:1d:2b:e9:f7:71:42:38:b7:67:07:2c:f9:9c:f5:
35:20:87:ac:c2:d5:3a:a8:4a:94:f8:b3:c2:4e:84:64:ae:35:
29:df:85:6c:81:39:f7:7b:c6:40:55:4a:20:0c:17:a8:33:a9:
01:19:ae:85:0d:b4:f3:b7:87:fb:cb:84:a1:5b:9b:f7:00:92:
c2:a0:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:27 2025 by rpki-client