Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: LF4JM9OXsZLDNE8ydNqJE+1REi5XOM6UFl/wGCCAUwQ=
Subject key identifier: 0D:99:AE:71:EF:61:6E:0A:A4:98:AA:44:97:06:BC:4C:2E:01:17:F1
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 0198752C3827D1E3D2C14D9204CE0F4F89DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 0590
Signing time: Mon 04 Aug 2025 13:01:28 +0000
Manifest this update: Mon 04 Aug 2025 13:01:28 +0000
Manifest next update: Tue 05 Aug 2025 13:01:28 +0000
Files and hashes: 1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: Vjl0CMqwYJBqmKBywW9+fNusSxZkz/OaZqmNxS3Ovx0=)
2: o3HDa5Hn0JXB7VWawD3Vzcdyd5k.roa (hash: di4+72seaNK8FCueSsPtQY60+2j8OsXpOCEk2d98xmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:38:27:d1:e3:d2:c1:4d:92:04:ce:0f:4f:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Aug 4 13:01:28 2025 GMT
Not After : Aug 5 13:01:28 2025 GMT
Subject: CN=0d99ae71ef616e0aa498aa449706bc4c2e0117f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:c9:f5:46:75:11:bf:ca:61:41:40:89:5c:
86:01:90:d1:46:c3:08:c3:c2:5b:cc:57:a2:66:e0:
a1:21:c1:8e:b9:8f:99:cf:31:ed:f6:0b:ec:1d:ca:
e8:8a:76:a4:18:f8:ff:b9:92:5a:8b:ad:e7:b5:55:
4e:b7:50:63:ab:3a:d7:2b:eb:fe:97:d0:ef:81:45:
a3:e8:e0:14:98:f7:75:c1:51:80:d2:c1:64:1a:44:
ca:7a:76:1f:b5:90:6b:b2:b5:82:a2:bf:04:fe:68:
15:7b:99:7e:dd:72:93:5d:b4:b6:d1:f5:bc:9a:8f:
ad:33:54:f0:e8:5e:10:a3:e0:40:f7:a6:0e:fd:69:
11:ef:38:24:ec:72:eb:18:b4:79:89:cd:a0:fb:1f:
6b:79:dc:68:fc:2e:4b:ab:76:a4:28:9d:a4:ab:37:
2b:8f:8a:93:b4:6a:3d:ba:6e:62:57:0e:4e:8a:72:
0a:4a:d4:e7:8f:6e:75:56:e8:15:e2:49:57:7a:a7:
af:f9:f3:02:29:89:d0:a9:a9:d1:c8:c1:42:ed:6b:
9b:93:09:80:30:1a:af:16:70:3c:ab:35:c6:90:ee:
a8:ae:a2:a0:88:70:5a:5e:6e:c0:19:0b:dc:18:95:
44:83:30:8a:84:92:79:f6:19:1b:c9:ae:19:c4:12:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:AE:71:EF:61:6E:0A:A4:98:AA:44:97:06:BC:4C:2E:01:17:F1
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:73:04:88:2d:59:41:96:2f:92:dd:60:ca:7c:af:b0:e1:
62:37:c6:0c:67:e2:2b:45:7d:10:fb:80:b7:18:45:c7:22:0f:
68:88:18:0f:30:17:79:e9:79:d5:58:54:22:8f:94:dd:cf:1d:
06:c4:aa:10:b8:86:d9:bd:ff:29:de:fd:a9:4f:19:ae:86:03:
14:5f:22:0d:ba:86:f1:5d:70:85:a3:b6:b2:b2:22:19:e5:a9:
03:bd:4f:bf:21:0d:c1:bb:41:1c:65:94:b5:41:98:6e:a2:f0:
90:3e:0d:7a:cb:aa:30:11:e2:05:82:67:9e:50:90:0d:65:47:
40:ff:a7:79:5c:6f:cc:78:bd:41:2d:53:54:4d:01:53:82:eb:
01:94:e6:e6:cb:14:42:6f:1f:8c:75:76:ff:1e:bd:5d:2b:3e:
7e:65:81:6f:43:c0:e4:84:16:8f:f8:32:88:6b:c7:1e:e3:f9:
e6:66:bf:77:b3:ca:61:2a:94:67:37:23:d5:b4:a2:43:85:54:
80:ee:f3:ff:e1:34:6f:35:c4:05:41:93:95:07:81:96:8e:00:
7c:86:36:1b:38:83:e3:77:cb:31:87:d8:1e:56:c0:ec:3f:f3:
be:f2:d7:af:b3:46:99:10:b0:bd:a4:42:30:2d:26:a1:6d:40:
3b:4e:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:48 2025 by rpki-client