
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: S8E0OHAB276I/0DpAln7OMEHLnVuDguNA+eYHJ0KwOM=
Subject key identifier: 6D:40:32:49:1E:B8:63:11:CA:03:69:71:09:5C:D7:17:9A:E3:25:A1
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 0198737436374386995C431621F902EB947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 0337
Signing time: Mon 04 Aug 2025 05:00:52 +0000
Manifest this update: Mon 04 Aug 2025 05:00:52 +0000
Manifest next update: Tue 05 Aug 2025 05:00:52 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: Lky46RPehc+zqqTIpfXRTQsdAgkdzlONn3K1QDEHYBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:36:37:43:86:99:5c:43:16:21:f9:02:eb:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Aug 4 05:00:52 2025 GMT
Not After : Aug 5 05:00:52 2025 GMT
Subject: CN=6d4032491eb86311ca036971095cd7179ae325a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:46:f5:9a:19:2c:f5:9a:c5:42:87:9f:b8:
ff:bc:c3:3a:aa:c9:f1:07:5c:76:d9:ed:59:ae:e8:
d9:b8:44:34:0d:96:2b:f2:b5:28:a5:4c:82:1a:c3:
13:05:10:12:11:9a:c3:5c:40:6c:3e:d5:60:a1:7a:
09:6d:37:6b:d5:41:df:b6:00:d5:5b:99:35:20:b2:
05:d2:38:1b:da:84:a9:1a:46:b9:fa:d9:3c:05:10:
50:34:71:c6:21:d5:92:2b:8c:bf:87:7d:5c:91:ce:
ba:1b:06:cd:d2:22:7c:e6:a9:27:8c:2f:8c:26:5a:
03:63:6d:8a:8d:a5:56:2f:b2:d9:08:9f:d9:33:7b:
c8:f4:5c:4c:3e:d2:a7:7e:13:a0:16:37:65:91:02:
80:5b:6a:11:ba:56:c5:2e:14:b7:3f:50:28:ec:1d:
ac:01:91:e1:41:47:7f:32:f6:88:ac:19:de:71:16:
be:08:1d:88:18:f1:b1:25:b8:74:9f:da:9d:cc:eb:
2b:93:92:7f:2b:f2:e3:f7:3b:5a:3d:ac:93:2a:99:
97:32:4a:64:d5:de:7f:7b:10:5d:27:b5:fe:01:b9:
d0:0a:0d:44:46:31:07:1b:90:34:0e:1f:72:d5:1a:
d7:b7:1e:54:42:20:90:84:87:af:2c:80:d7:09:08:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:32:49:1E:B8:63:11:CA:03:69:71:09:5C:D7:17:9A:E3:25:A1
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:cd:95:90:88:4b:f5:cc:a3:f0:56:62:7a:c9:e7:2b:3a:
5b:98:7b:2e:df:61:0b:3e:54:c7:5e:3f:cb:cf:f9:cc:8d:a6:
ce:9e:7b:54:d7:28:a8:39:49:a8:dd:20:29:e1:ae:1f:74:19:
b0:81:ee:33:b8:f1:93:2c:93:8f:fe:d9:92:79:18:7c:0c:bf:
3e:f8:cf:7c:3d:ae:3b:1b:96:b9:d5:70:46:03:5e:1f:7a:6b:
9e:64:02:5d:15:62:47:2c:91:29:fe:98:68:2e:58:8e:9d:3c:
53:cd:6d:0d:d1:37:a9:6f:8c:ea:8b:23:9a:9e:e3:e9:42:ad:
ba:b0:cd:57:cd:21:1d:01:10:d0:b4:00:9a:83:b8:88:23:0d:
b9:7d:99:cc:ac:65:f4:20:66:68:db:bb:fc:e1:33:cd:ab:a0:
4c:a0:84:e0:0d:7d:89:fa:e0:5d:f6:14:c5:0d:aa:2d:47:d9:
6c:68:31:6f:f7:7b:73:d5:b8:f7:47:d3:be:09:19:23:83:e2:
6f:70:90:35:92:55:c3:2e:af:44:21:cd:fb:96:52:41:2e:60:
d6:03:f2:dc:18:61:b1:54:82:4f:78:cb:37:ae:65:73:3d:bb:
a4:5e:4f:26:9e:e0:29:2b:8b:a1:54:18:53:a8:1a:8d:ef:1d:
89:57:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:20 2025 by rpki-client