Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: hDAYqt/3MGZ3kMZjhbiLLPGWfk8w0MXF1CmuH4qeRbU=
Subject key identifier: 49:57:1C:EB:1B:F6:BA:78:E1:46:0E:E2:AA:E1:78:D1:B8:A5:04:78
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 019872986866E01FF02BC9FFC62F1B1D3329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 0356
Signing time: Mon 04 Aug 2025 01:00:47 +0000
Manifest this update: Mon 04 Aug 2025 01:00:47 +0000
Manifest next update: Tue 05 Aug 2025 01:00:47 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: VxPNY9o+afTgM5Rjm1CumwlIQoKR+9KTsw3OJ1H6uxk=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:68:66:e0:1f:f0:2b:c9:ff:c6:2f:1b:1d:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Aug 4 01:00:47 2025 GMT
Not After : Aug 5 01:00:47 2025 GMT
Subject: CN=49571ceb1bf6ba78e1460ee2aae178d1b8a50478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:23:5f:8e:61:3c:99:ea:00:60:6b:94:30:
f5:29:cb:5a:3a:ed:be:d3:3a:91:2e:e4:ee:b8:73:
5a:6e:9d:5f:15:c8:24:c2:1c:8b:bc:d3:27:06:2e:
ca:8d:0e:f9:b1:25:87:46:b4:e0:f0:64:7b:5b:b0:
14:5f:82:77:55:e0:d0:a4:88:9e:31:89:63:67:f8:
bd:42:16:13:20:26:5f:f8:36:cf:af:44:29:9b:97:
85:1c:f8:11:aa:e4:16:fe:86:98:0e:bb:44:76:c6:
d8:b1:89:eb:91:21:6c:70:23:96:48:90:06:5b:a5:
7d:2c:b2:1c:96:b1:b7:6c:e2:fe:92:12:2d:ca:2e:
0c:05:95:23:86:99:ab:d8:bd:c6:c4:45:3d:a8:ab:
cc:71:ea:68:cc:1d:f1:e4:62:de:29:69:81:4c:f3:
84:cc:32:b6:9d:7a:89:b7:b0:e0:ba:02:ea:30:d2:
12:eb:b6:40:4b:a8:17:d7:a9:1c:f9:0e:6e:6b:b6:
18:2b:c1:e0:ca:30:22:d9:3e:2b:1a:3c:5e:3d:cd:
b3:24:24:85:89:a2:ed:de:04:91:88:40:dd:22:27:
98:e3:a4:77:77:00:cb:19:60:0c:7d:03:4b:c4:3a:
3f:49:f8:77:86:cc:84:96:42:72:63:75:28:9b:f6:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:1C:EB:1B:F6:BA:78:E1:46:0E:E2:AA:E1:78:D1:B8:A5:04:78
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:e7:9c:e0:bf:a9:48:b1:16:cb:48:32:f3:b1:7e:f5:43:
bc:1b:fc:19:2e:e3:4b:89:d0:b3:ee:37:63:3d:07:fa:8e:f9:
06:6e:a7:d9:2c:ac:82:e3:cd:59:b1:e0:d7:26:ed:0e:49:e4:
18:91:35:eb:33:be:9f:57:3c:d4:d5:3a:2a:cc:ad:31:3b:7c:
f2:fe:85:2a:9c:4f:78:31:39:ce:7a:78:81:e6:88:3c:81:3f:
72:b8:57:b7:5c:dc:24:d4:b8:01:e5:15:2a:60:73:19:0b:ba:
26:60:b1:e4:b6:38:27:e8:b1:b2:54:75:ae:9e:ee:d9:ad:70:
6e:0e:64:26:88:ce:94:f7:70:15:5c:e7:ef:98:03:37:4f:49:
b9:6c:04:81:fd:db:80:06:2e:df:54:b4:95:70:9a:07:8e:99:
08:d8:6c:76:c4:e6:6f:cb:46:f5:f5:44:4b:42:ad:17:77:bf:
a0:a3:da:2f:b5:18:7f:b1:48:7a:87:26:ec:7b:d6:73:b4:8d:
4e:79:05:d1:cd:6a:48:d5:8f:5c:df:03:87:06:6e:e7:f0:8a:
1a:9b:04:25:5d:36:4a:85:27:5d:cc:2a:bc:25:e4:c0:70:19:
28:ab:c2:79:90:75:6a:d8:52:25:73:6f:8b:41:df:36:23:8b:
f7:5a:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:53 2025 by rpki-client