Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: oqaYyq41FluA+xNjhyqydnjCqOYkU3ReMgZbTgNIIeE=
Subject key identifier: FC:52:F9:D6:9B:34:D9:5E:3A:93:63:6D:73:35:30:1E:D6:79:B7:08
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0198730647BA89B8A0185BD0E7B79BA6EF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 145F
Signing time: Mon 04 Aug 2025 03:00:48 +0000
Manifest this update: Mon 04 Aug 2025 03:00:48 +0000
Manifest next update: Tue 05 Aug 2025 03:00:48 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: dpqwIEFPPdEXr6/AYD6U21loWfxbOzr3k1ulWrTew4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:47:ba:89:b8:a0:18:5b:d0:e7:b7:9b:a6:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Aug 4 03:00:48 2025 GMT
Not After : Aug 5 03:00:48 2025 GMT
Subject: CN=fc52f9d69b34d95e3a93636d7335301ed679b708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:cb:f8:4f:32:df:ca:63:b0:93:9b:07:36:
e5:e4:6d:c8:bc:af:2e:99:59:04:40:cd:ca:f9:0e:
76:7e:70:9f:e9:e5:c1:30:bd:79:cb:ca:df:5c:0f:
9d:5a:29:ef:06:2c:c2:c1:a3:f9:07:f1:6f:bc:c3:
24:a2:f8:1a:9a:1b:cf:a5:1f:58:5f:88:51:9f:92:
cc:e4:55:00:79:b4:c5:93:72:7d:a5:ae:20:77:ba:
d5:b4:09:05:f1:a1:77:ff:79:c5:e6:cf:0b:f2:f8:
f9:b2:2b:17:9d:89:bd:49:b4:a7:2d:99:bd:54:3f:
a3:3d:d0:79:a2:8e:96:8e:91:fb:3f:19:1e:f8:15:
2f:76:08:aa:0b:14:93:13:a2:39:5f:cd:fe:33:e0:
ff:2c:1a:0a:0c:8c:5d:71:ec:47:ad:c7:b2:6f:be:
fd:4f:fb:2a:f8:8e:be:2b:ea:6c:c9:0c:da:66:0b:
62:1d:f7:c8:17:b4:f7:19:5e:64:82:00:f3:11:e9:
5a:10:0c:38:8c:81:df:38:e2:2d:03:ba:52:95:ff:
88:cd:fb:4a:0a:22:ef:37:60:5a:9f:96:f4:6b:8d:
cf:2a:9c:e1:2d:05:b7:45:eb:a1:63:e0:88:94:37:
e3:a6:48:86:7a:92:67:a1:ac:75:42:c7:3b:a3:03:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:F9:D6:9B:34:D9:5E:3A:93:63:6D:73:35:30:1E:D6:79:B7:08
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5a:80:e6:60:76:d2:29:f7:e6:54:ec:d8:c1:f4:2d:e4:ce:
39:d3:81:5b:71:67:70:0f:0d:c1:79:e6:1e:eb:47:cc:be:a4:
11:e9:d5:a6:44:6c:ca:ee:2c:bf:8c:ed:9f:d8:8f:72:5b:d3:
de:9d:46:1e:6f:4a:d0:af:ed:c6:77:b2:6f:4d:1d:45:a3:30:
43:a5:f3:ea:49:0f:28:2e:c9:d7:fa:f2:f5:23:55:86:78:08:
2c:04:bb:d0:67:01:2b:5d:01:a2:8f:b0:e8:ee:ab:c1:85:cc:
bf:13:cd:20:f4:8f:17:2d:cf:bf:34:cc:e0:17:80:b3:71:5f:
bb:c7:72:f1:4f:f6:1e:b2:ac:b6:8c:17:e1:36:10:d1:cc:15:
01:11:03:89:81:1b:02:c7:04:d6:63:7e:b2:68:a0:73:cb:b9:
16:50:27:d7:e2:df:a2:ce:5f:5b:f6:af:4f:a0:30:5c:20:bc:
34:0e:82:72:9b:d1:da:e9:c4:7a:9e:e7:1f:f2:4b:81:91:7d:
04:c3:24:aa:3e:e7:a7:ba:7c:38:d0:63:7f:5b:29:b9:26:da:
2f:ab:e2:af:10:f2:cf:54:33:d0:55:18:83:48:9c:aa:d3:3d:
a9:2b:55:89:c0:96:f2:e1:a4:76:39:69:0b:b3:60:9a:19:8f:
b4:a6:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:53 2025 by rpki-client