Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: Fly/U5q2Ny6UV3eoTNY3xW8RvAQ7OMMfzkv+7omPHrg=
Subject key identifier: 02:55:9B:20:4A:1E:03:4B:13:48:16:69:DE:39:0B:80:9B:BE:90:76
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 0198D65F0F9B528B7BE163A58C06B7731619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: WQ12DapB7/igu08Nkvs2SdVzjZPt0INWgtZ3jyRi2MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0f:9b:52:8b:7b:e1:63:a5:8c:06:b7:73:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=02559b204a1e034b13481669de390b809bbe9076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:ef:f6:e5:4a:52:4e:e7:e5:34:ce:87:2b:
1f:82:0a:c3:bd:ea:15:68:c7:78:98:db:e7:f8:6f:
b9:9a:0b:13:89:cd:eb:59:e2:0e:53:38:0d:25:50:
ad:ab:8a:e1:49:6d:bb:cf:8e:0a:aa:20:94:d6:74:
40:b7:8c:69:36:c0:a8:86:89:42:5b:4d:7f:4c:9d:
d4:ea:5a:09:1a:db:f8:c1:17:0b:a2:3a:a0:91:bb:
b2:6b:05:6e:35:93:3f:d1:d1:0d:82:b9:89:53:79:
4f:ba:79:77:10:d7:5b:aa:3f:28:48:94:6b:cf:5e:
36:b7:ba:63:48:43:14:41:2f:ed:ae:97:9e:40:73:
22:3f:4b:47:49:3d:84:81:b5:6a:f9:e8:80:22:7f:
10:33:bf:3b:bc:86:68:ea:a0:7e:08:01:e0:ce:95:
ca:d9:c7:a8:a8:ab:78:38:f0:cd:9e:0f:10:97:ab:
a7:4c:a8:cb:63:28:48:6c:b0:4e:5b:d3:21:af:e6:
63:9d:a6:13:1b:88:49:00:4d:c0:fb:41:52:b3:5f:
78:d9:5e:f8:7c:ca:84:79:e8:ab:ae:40:a8:55:df:
0a:ec:c4:2a:8b:77:ca:86:b7:e3:a2:f4:4d:87:39:
6e:62:47:30:86:39:0e:57:1f:d9:92:ab:d1:08:09:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:9B:20:4A:1E:03:4B:13:48:16:69:DE:39:0B:80:9B:BE:90:76
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:3a:b1:df:fd:27:7c:27:cb:fb:ee:ed:63:9a:ab:dd:44:
78:16:2b:1d:2b:29:77:60:d4:fc:32:ca:5f:8b:be:6f:e0:a8:
7a:5d:2c:14:12:4a:0f:06:f2:b1:fd:fc:54:14:8d:d7:49:04:
a3:a3:83:d7:64:5d:c3:05:e2:31:5c:b6:ef:60:cf:d9:57:bf:
ef:45:62:bf:1e:27:51:c4:59:5b:22:c6:5f:1a:6a:8e:42:8f:
86:02:ba:c8:5d:91:18:27:e7:05:53:92:ba:21:bc:dd:26:08:
51:75:a0:53:46:67:70:d7:1c:40:cf:e4:fe:b6:ec:0d:f9:85:
45:fa:b7:6b:55:77:ed:00:a9:78:a0:da:58:98:ac:95:fa:d8:
fb:06:b5:be:cd:6f:2e:14:23:09:5f:5e:28:05:58:e1:0d:10:
6a:85:93:c5:23:08:7b:c5:28:65:10:8e:78:12:38:4b:2c:0b:
b6:49:14:c2:b2:08:93:a3:ce:44:da:e6:98:cf:75:29:fb:1b:
ae:61:77:bf:09:f4:28:b5:cc:df:e9:a5:38:73:db:2c:4e:f0:
34:2e:f2:97:1c:e8:13:b0:87:d3:f8:c8:b0:11:9d:7d:2e:8d:
e4:10:9f:9b:8c:e1:31:c7:e3:6e:d8:41:94:87:a3:eb:54:86:
5e:2a:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:30 2025 by rpki-client