Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier: PnXiB4aG1eS2mE7V5spqJl3uC/PEytVx23oJw6TT0O8=
Subject key identifier: 5B:6C:3C:49:C9:79:B1:ED:2F:40:45:C8:0E:3E:90:D6:B2:CD:9E:0E
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 0198D5BBF3584921E76F8E1C240B7484A208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number: 02FA
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: WL4UMhs0WsWfIFKPeJd7cNkoLrbdeISseeLkPjc3kgw=)
2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f3:58:49:21:e7:6f:8e:1c:24:0b:74:84:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=5b6c3c49c979b1ed2f4045c80e3e90d6b2cd9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:98:ce:8b:17:00:f8:d8:1e:ea:56:78:98:
ac:6f:c0:a9:4e:bf:2a:e9:47:d5:69:0a:37:a8:1a:
b5:e9:0d:bc:e2:3b:60:97:ec:95:a3:52:3e:29:19:
ba:80:a5:5a:88:80:ae:1d:f9:74:2d:1a:09:83:81:
d5:cf:2b:e3:77:c5:85:2d:53:bb:f1:24:60:8c:dc:
cd:0d:5d:04:fb:a5:2b:ec:69:64:52:0a:f5:74:57:
12:9d:fe:51:0f:db:ea:6d:fc:9a:c7:a5:42:5e:54:
e5:c5:52:ff:54:2a:8b:fb:c0:3d:d0:0d:40:dc:aa:
11:a7:45:21:09:fc:41:31:ce:a2:bc:39:78:9b:3f:
b2:d7:dd:f2:a7:b9:f0:44:3b:e1:1e:c1:23:a3:ba:
0f:83:9b:86:7f:a3:04:3d:79:d2:68:93:b6:9f:a6:
a2:02:4a:73:dd:8e:e8:7c:1c:a1:8c:bd:aa:85:34:
05:e2:54:e7:ec:66:f0:f1:62:60:62:d3:06:18:f0:
f5:2c:a1:3a:f3:53:9b:db:ec:d4:85:28:42:7c:21:
67:f4:12:d5:16:48:1c:b9:27:6e:8e:3f:c4:23:81:
dd:32:da:0b:f3:8b:cf:e4:32:4a:5f:99:9a:50:f4:
a9:f4:b1:d0:d1:cd:eb:33:57:bb:3f:09:37:78:65:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:3C:49:C9:79:B1:ED:2F:40:45:C8:0E:3E:90:D6:B2:CD:9E:0E
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9b:f9:c5:29:dd:d9:e2:9e:a5:7b:b4:28:9e:23:6a:62:15:
38:95:79:2f:bf:f0:8b:b4:9c:85:22:21:d9:c9:0a:ff:20:a7:
44:b1:9d:8f:cc:e4:36:a1:51:9f:69:54:04:8a:75:c0:d3:ce:
6b:a1:7b:ff:7f:1b:81:4b:3f:b6:2e:ce:b4:26:f4:37:16:5c:
4d:42:3b:a9:f5:8b:7a:97:79:bf:d4:ff:02:b0:ce:7b:a2:96:
9a:89:68:af:90:13:e8:a5:67:5a:59:7c:29:8c:4c:f1:77:45:
ae:09:83:bb:14:a3:54:66:2c:44:c4:0e:3a:8b:e5:1b:c3:99:
f8:e9:77:ae:33:9f:6f:58:20:c9:82:3d:9c:d8:b6:65:cf:e2:
99:59:f4:02:2c:23:66:ce:ab:9e:7d:1d:1f:11:01:db:67:f1:
ec:8d:89:48:09:21:3f:e6:cb:46:48:3d:eb:81:16:f6:5d:3e:
31:08:47:be:1c:b2:10:64:2e:7e:cb:30:f3:9a:97:1b:76:1d:
d8:4c:ba:7f:e4:58:c5:b5:a6:ec:94:d4:6a:c3:35:45:c9:53:
04:1e:e1:14:0f:75:87:76:09:ef:1a:b4:2a:58:df:7c:28:96:
fe:3e:c3:20:8c:f9:3e:3f:88:24:09:e5:08:0c:02:0b:a0:34:
83:f4:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:05 2025 by rpki-client