Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: Ik0cLBHwqZVnBXEDr9luYamXiHG8dlunN+ahK9oXsMI=
Subject key identifier: A5:F4:5F:09:1E:B5:65:57:61:57:63:57:95:0E:41:B7:39:48:EC:2C
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 019873E2AE0742ADE99E5AC64187604D25BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 1224
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: +JMP9c7JshWFUd3C74WIvLTh9aT5zu8oawAdEw2YTw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ae:07:42:ad:e9:9e:5a:c6:41:87:60:4d:25:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=a5f45f091eb5655761576357950e41b73948ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:84:55:ee:82:8a:c5:8e:5e:11:f7:0b:20:
78:33:9a:1b:80:2c:5f:41:e1:60:38:b8:93:3b:3a:
22:4d:23:42:cc:8c:51:57:db:c6:5d:39:d5:8c:d5:
97:1e:fd:ff:a5:6d:bf:7d:71:05:9f:07:4b:20:dd:
33:24:12:5d:6e:67:39:da:0c:82:e3:50:92:c4:f8:
56:70:2f:e1:34:7f:61:18:a2:f6:a4:a9:1c:b0:ce:
9b:39:f5:3a:8e:8e:25:ee:d2:18:aa:15:8f:a5:45:
53:88:c6:be:7b:c0:ec:2e:37:0c:40:d8:b9:84:74:
d8:a2:71:12:61:2c:14:b2:26:c9:b2:35:75:6d:52:
34:a4:1c:92:6b:d2:3d:70:d3:f8:e3:1b:c3:b0:7b:
0f:92:5e:28:01:70:c1:dd:08:85:1b:b9:34:98:cf:
40:66:30:d5:1d:77:81:a5:4d:25:42:64:83:92:08:
c2:7b:e1:4e:b4:0f:e3:fe:c6:cc:25:2d:08:0b:0d:
8b:e8:c5:1c:c2:55:e9:4a:dd:36:2a:5e:92:1f:48:
2f:0f:5e:85:96:9a:97:b7:06:c0:7c:56:da:e0:85:
3f:e4:1f:aa:ab:33:c5:14:86:5b:f4:47:80:be:ac:
a9:0a:96:68:5e:6b:9f:1a:fd:16:3a:0b:f9:28:67:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:5F:09:1E:B5:65:57:61:57:63:57:95:0E:41:B7:39:48:EC:2C
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:3f:f2:5d:57:f4:58:5b:f8:5c:6e:11:56:d4:75:63:7d:
6a:85:b2:cd:0a:7d:29:db:ef:82:6d:a0:86:28:d6:76:d2:13:
49:d4:83:44:a1:4d:a7:c9:c2:6c:91:49:db:0a:05:e3:19:63:
8b:fd:0c:82:ec:ec:68:81:90:71:bc:ec:77:1a:14:15:c9:23:
a2:a2:d1:ab:9d:a1:07:e7:15:a2:f9:1f:d9:99:f5:5d:54:c3:
da:e3:c1:16:24:a8:b6:11:f4:34:c0:b8:c1:e4:2f:8f:c4:a3:
50:cc:37:9d:c9:d9:f5:17:45:79:1f:dc:7f:4f:be:d0:ef:5f:
5b:75:2a:ea:26:d9:c2:6f:aa:c2:3c:ac:bd:f8:4a:e0:d5:cd:
7a:76:ef:07:b6:e5:46:da:4e:c3:08:2c:64:f7:79:c5:4d:86:
57:9c:46:2a:1c:07:cd:a5:05:83:aa:4b:f2:69:b2:f7:53:98:
b5:95:3f:24:2a:40:be:35:87:26:13:3e:5f:32:4c:a4:68:e8:
c0:a8:27:ef:cd:cd:2a:8d:71:bc:76:ce:00:54:46:49:a9:35:
d2:ae:87:b0:6f:3a:58:61:66:e7:58:96:e7:c2:bb:88:ce:f0:
5a:8f:f5:61:00:23:31:b5:27:14:85:ce:9b:cd:fa:a1:fa:ef:
92:96:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:44 2025 by rpki-client