Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: MhihZeHJCQseDOUAUKi+3tjw4dRSUV/mhIZo2uSXPnI=
Subject key identifier: 22:92:3A:33:47:40:7A:31:0E:7E:E6:48:10:81:FA:75:18:A6:77:2A
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 01988167C9C9A7D92CC6DD18CDD54F2CC61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:59 +0000
Manifest this update: Wed 06 Aug 2025 22:01:59 +0000
Manifest next update: Thu 07 Aug 2025 22:01:59 +0000
Files and hashes: 1: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: ifIVDEMtKWWk+Y6xPZLq+UA2+f1/HXfocb/dV2+tXqo=)
2: x4aksm8H5U_SoWV9w4ojBxWjtSw.roa (hash: DpLDxBcf+XBzD3AIM/0hCbVFFthMKuVEgRBA/YNYRu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c9:c9:a7:d9:2c:c6:dd:18:cd:d5:4f:2c:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Aug 6 22:01:59 2025 GMT
Not After : Aug 7 22:01:59 2025 GMT
Subject: CN=22923a3347407a310e7ee6481081fa7518a6772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:c0:1a:2b:54:11:e1:4f:dc:72:72:3c:ef:
2e:eb:30:ee:5d:6b:70:a8:86:ac:55:f8:44:a0:7d:
ef:97:66:41:8f:f5:56:89:e3:e0:b0:56:87:e5:54:
50:ea:d5:9d:48:44:c4:2a:41:ae:72:c5:4e:f5:6c:
65:4c:ab:05:ec:5b:d9:dd:be:1b:f5:ad:f5:3f:0a:
f0:fb:f1:22:1b:6a:62:86:f1:10:27:a1:6d:8c:db:
8d:3e:e1:00:fb:c8:fa:0e:59:2e:8f:e6:d0:68:dc:
8e:94:40:d8:f2:54:47:f4:ff:63:2e:a1:33:1d:3d:
cb:b4:bc:1f:3d:3e:78:a8:b1:47:1d:67:27:65:be:
28:c1:f1:00:f8:c9:fd:a5:9f:7f:e0:3b:72:44:f3:
47:dd:ed:29:cc:94:d7:33:c9:67:b4:a5:2d:f9:05:
4f:28:77:44:68:b3:b2:80:d5:cb:17:5e:0a:82:92:
67:45:e0:37:ca:60:c8:02:c5:16:9b:42:e7:52:af:
4a:3f:94:20:41:2a:5f:97:95:b8:7e:c0:6b:49:4f:
5a:5e:32:99:35:ff:85:5b:4d:77:ce:e1:03:f5:24:
12:52:da:f5:6e:20:b4:44:9b:86:c3:10:d1:b9:a8:
3c:a1:73:b7:4a:70:ea:fa:2d:ab:e3:12:2c:76:f8:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:3A:33:47:40:7A:31:0E:7E:E6:48:10:81:FA:75:18:A6:77:2A
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e1:ce:52:1c:9d:ee:13:da:b1:62:96:2e:6c:38:f7:2f:9e:
9e:8d:fa:40:26:e8:e5:7d:49:12:a2:5c:47:93:0c:a1:73:06:
e5:9a:40:30:95:2e:9c:c6:57:c9:05:31:67:05:f0:b8:73:b7:
2e:88:fa:3d:0a:6a:ab:fc:a4:8c:e2:b0:55:9e:f3:f5:26:2c:
e6:49:f3:3b:a6:d2:04:7b:cf:03:d8:c7:b8:fe:62:2b:e3:4d:
79:c1:09:bd:47:a4:b4:e9:7c:16:21:dd:38:0c:71:b1:5c:84:
34:34:4d:3f:a8:48:18:31:9d:0b:1a:93:f2:b6:c6:03:ff:b2:
a0:b3:a8:e9:d4:a9:19:a5:d7:1c:26:0c:cf:43:b7:8e:b9:8b:
04:5e:c4:8b:75:e5:1e:e4:5b:01:63:72:b5:c5:64:d7:4d:0b:
6b:68:cc:a9:58:28:9e:bd:b1:71:da:cf:a2:e1:eb:22:3f:b0:
90:fe:18:69:18:ba:93:ef:06:f7:37:5f:e2:e5:01:57:7d:0c:
ca:16:43:48:fe:ff:66:3c:b7:de:05:1d:e7:43:4c:4f:aa:fc:
0b:7b:d5:4e:b2:c1:ec:fa:fe:d2:9e:03:ce:e7:95:d6:cf:84:
e2:eb:b8:fc:03:73:e7:c6:9a:b3:6f:71:39:73:f4:3a:43:fa:
15:28:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:14 2025 by rpki-client