Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: 4sN5uZIXUI18/ciP8sRw4b6X0Go/bONiXRVTVGF9rJc=
Subject key identifier: 70:D4:37:29:78:5D:3F:BF:75:9F:E9:6F:7F:06:F5:A0:DD:5D:8F:0B
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 0198978124BBD10CF029F5113BC5E8C42C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 15E4
Signing time: Mon 11 Aug 2025 05:01:19 +0000
Manifest this update: Mon 11 Aug 2025 05:01:19 +0000
Manifest next update: Tue 12 Aug 2025 05:01:19 +0000
Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: CqmWAYX0ulCesreCP0yEccaJlRNQAM97U3lwxqMBsd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:24:bb:d1:0c:f0:29:f5:11:3b:c5:e8:c4:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Aug 11 05:01:19 2025 GMT
Not After : Aug 12 05:01:19 2025 GMT
Subject: CN=70d43729785d3fbf759fe96f7f06f5a0dd5d8f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:c1:40:ac:a1:8d:d5:b3:00:a3:72:a4:38:
7d:6a:f5:47:82:d1:02:c7:35:3b:99:89:c4:b2:e0:
36:83:86:a2:c5:2c:94:11:ea:bc:b1:d3:1f:6c:c5:
1b:ba:d6:03:72:9b:9c:89:d0:9d:96:6a:ef:dd:3c:
2a:4c:bc:c4:36:bd:3a:20:da:8a:3e:7d:f1:ba:fd:
67:88:9c:c5:23:71:f5:d5:31:f0:ba:44:d2:cc:ab:
8d:af:92:0d:69:5b:f9:ac:08:f7:00:86:ba:15:62:
49:eb:7c:9d:22:b5:d3:38:5c:de:ad:98:9e:07:57:
91:f6:0c:c8:98:f6:a7:15:98:54:67:29:b2:09:a4:
11:c0:b6:d7:bc:40:20:df:c4:70:90:8b:23:01:6e:
c5:91:13:ce:78:f2:a2:ed:e9:ad:9b:9e:42:da:be:
1e:5a:d9:e1:8c:a1:83:20:72:47:30:08:c1:fc:37:
3a:b7:59:72:6d:fd:3f:f2:03:66:8e:0f:ef:17:46:
18:2a:90:bb:37:14:28:27:e3:5b:76:e8:71:6c:f8:
80:b7:18:bd:48:f4:99:62:94:d5:e6:5f:32:21:55:
73:09:2d:fe:a2:3a:f0:0a:e1:6a:06:11:e3:a6:9c:
b8:5e:f9:dc:99:4a:d6:72:ac:fb:b4:dc:19:a2:69:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:37:29:78:5D:3F:BF:75:9F:E9:6F:7F:06:F5:A0:DD:5D:8F:0B
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1c:84:b2:82:99:16:e0:e8:c7:0e:5a:cd:ff:7a:72:33:5b:
f8:53:49:97:6a:b4:8c:4e:63:b2:25:83:90:51:14:67:f6:7a:
75:09:fe:44:27:27:e8:66:c8:f0:0c:1b:b4:4f:81:ae:57:8e:
2e:6b:ce:24:07:a3:f1:b2:06:de:fa:1c:12:f7:2b:6e:16:4a:
e6:6b:cb:75:71:22:98:04:e3:09:c3:ef:39:4c:37:b6:58:2d:
e5:63:0e:42:e9:3a:16:5b:7d:1f:48:15:3a:4a:36:39:5f:46:
65:05:ce:6c:4c:88:a7:04:d1:c3:2f:ed:d4:34:07:20:dd:c2:
9f:2b:d5:e7:53:9e:1c:f4:94:dd:8e:3a:82:94:4c:40:72:93:
7c:70:84:3e:15:fa:00:73:74:02:fe:bd:cf:ba:3e:e9:53:c7:
bf:77:0d:31:01:43:e1:f3:3d:82:da:c2:6f:a5:4c:a7:37:e1:
2a:8b:f0:7e:79:c2:ef:ae:a4:f5:00:6b:18:a5:5b:1c:96:84:
23:5f:a4:a4:df:d7:bb:f5:f5:f5:9c:cd:27:9d:86:6d:8d:f9:
d9:86:72:78:78:5b:ea:f6:66:38:86:2f:fc:3a:5b:9d:9c:a3:
93:e8:0d:d9:d0:b4:4a:fe:35:bb:a6:b0:aa:d6:d8:3f:23:68:
38:e2:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:04 2025 by rpki-client