Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: BH+DbCJRV8NbUS2J+/O+Ek/64CvCMEkyK6ri9n28N+Q=
Subject key identifier: F0:FE:42:E8:3C:A6:F2:0C:6B:BE:6C:A2:26:E5:2E:AA:E0:3E:B0:03
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 019880C260BAB71B73BAEBD9B0268F9B203B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 0498
Signing time: Wed 06 Aug 2025 19:01:19 +0000
Manifest this update: Wed 06 Aug 2025 19:01:19 +0000
Manifest next update: Thu 07 Aug 2025 19:01:19 +0000
Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: ov1PKQg+2xNOr4IlFGmGdM5+U8AsjCAQ5uwywgPakmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:60:ba:b7:1b:73:ba:eb:d9:b0:26:8f:9b:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Aug 6 19:01:19 2025 GMT
Not After : Aug 7 19:01:19 2025 GMT
Subject: CN=f0fe42e83ca6f20c6bbe6ca226e52eaae03eb003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:92:be:90:cf:d0:7f:1d:56:08:e1:85:0c:
d1:4a:21:bd:c5:c9:24:ac:fc:6c:26:18:50:1b:47:
47:99:32:c3:bf:01:c8:56:7e:b8:7f:dc:7e:b6:b6:
b6:01:8b:6b:63:b3:f5:d1:c0:04:17:bd:20:e5:45:
00:b0:88:09:de:55:30:56:fd:19:30:8e:c4:22:c9:
c6:6f:7c:34:32:5f:64:72:70:25:e1:18:7e:31:1f:
38:44:c1:b1:39:43:37:b3:f9:09:c0:3f:af:7f:e5:
de:64:c3:cc:1d:05:19:f7:43:7d:13:bd:85:80:8f:
40:aa:8e:41:6e:1f:a4:a4:ba:b8:e5:34:2f:1b:61:
14:4d:c0:54:47:1a:af:1a:26:d5:5f:4d:be:71:9f:
6f:39:4f:e6:16:73:dc:70:57:46:4f:29:67:96:a6:
3a:5c:bf:8f:47:ee:e3:8f:66:75:ff:7a:32:8a:c4:
be:41:21:11:d2:d7:da:41:d3:3d:54:0e:e7:92:32:
ae:05:84:ab:4b:ac:d1:85:e5:54:ab:f8:19:a3:57:
69:3f:9d:c0:78:9a:45:23:43:4a:9b:38:14:1e:a4:
88:63:12:a7:93:1e:0d:fa:d2:cd:33:44:63:cb:c6:
4c:33:63:bf:d1:30:7d:f2:34:1a:c8:d4:da:56:92:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:42:E8:3C:A6:F2:0C:6B:BE:6C:A2:26:E5:2E:AA:E0:3E:B0:03
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:7e:a8:0e:4f:08:ba:8b:13:13:84:91:4b:1d:1b:c0:53:
54:c2:8a:37:d3:ea:98:a0:12:b7:b7:32:4a:c3:b9:bf:87:b2:
01:b5:22:6e:72:ca:59:00:69:04:76:bf:d2:6e:9a:b9:fd:d0:
26:d1:c1:84:c4:70:d9:e5:1b:c1:7f:1c:73:93:46:23:50:da:
55:9d:0e:91:54:a6:84:8a:03:7b:2e:2f:8a:13:48:7d:d6:2b:
52:7d:7c:17:5e:0f:a3:39:ce:90:21:a2:58:39:cd:e0:e4:d5:
3d:d7:9d:b5:53:62:75:ff:df:f4:96:f8:ec:d9:e5:a3:ec:fb:
e4:42:6c:b4:1d:18:ea:4f:2b:84:02:6d:f7:de:70:2c:cc:4e:
d7:d7:94:0c:7a:dd:8b:cc:b0:c3:a1:55:9f:ae:89:5f:7e:7f:
a2:b9:26:82:ea:56:0c:71:61:cc:b1:2a:0b:5a:05:48:93:1b:
26:6c:83:f6:4d:13:43:e2:76:be:51:ce:fe:51:c5:63:5f:0f:
01:f7:5f:70:db:f2:a8:75:46:fb:b5:e1:15:9a:5d:cb:f8:7f:
1e:23:0b:51:59:1d:31:99:9c:f1:d4:57:7d:87:f6:f2:9e:45:
dc:da:22:77:ba:df:89:06:1c:c3:89:04:16:ec:76:93:1f:87:
29:44:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:24 2025 by rpki-client