Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: R/Kl0dNL8P5tBdeEBIAh3aASp53NhOvpXYAVKMc3Egc=
Subject key identifier: BE:42:B6:8A:CB:F3:0D:84:BE:DA:13:63:91:BA:9F:28:16:7D:5C:50
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 01988B458E048EAFA0DDCA3CEC5AF67F2B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0DDB
Signing time: Fri 08 Aug 2025 20:00:48 +0000
Manifest this update: Fri 08 Aug 2025 20:00:48 +0000
Manifest next update: Sat 09 Aug 2025 20:00:48 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: G7qj7dGJ5XR8FYuQteQypBiz280JsTKJlAj5jrpXy6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:8e:04:8e:af:a0:dd:ca:3c:ec:5a:f6:7f:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Aug 8 20:00:48 2025 GMT
Not After : Aug 9 20:00:48 2025 GMT
Subject: CN=be42b68acbf30d84beda136391ba9f28167d5c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:44:26:e9:f7:84:38:94:1f:f2:bd:74:76:
ff:0b:4f:61:c0:a8:b0:a7:97:39:b8:24:e9:a7:d3:
72:1b:69:cf:15:f9:e9:ec:28:e8:2d:0f:1f:16:74:
ea:50:42:3b:09:04:f3:0d:09:89:5e:1a:0c:e7:2f:
84:f0:f5:6e:a3:88:33:04:2d:72:c6:96:14:d2:e3:
15:ea:54:bc:a2:fb:7c:6b:ad:db:93:03:58:fe:92:
8d:6c:d6:84:79:7b:d9:7e:25:3e:53:cb:1c:66:18:
54:98:fd:25:c4:6a:af:41:8c:32:9e:3f:43:c5:6e:
d7:b3:ae:14:2b:47:50:d7:4c:c7:6e:06:bb:25:28:
38:85:dd:ef:fd:b5:b6:f7:35:97:ab:39:09:d9:30:
9c:ae:25:93:f8:dd:b8:ed:ef:2b:ae:95:4f:35:03:
74:63:be:bf:87:cc:c6:52:65:58:64:27:26:0a:95:
ce:25:d8:2f:52:0c:72:e1:a5:f4:43:4a:55:02:07:
05:3e:4a:ac:fb:3d:e8:d4:c1:23:3d:8d:90:67:e4:
5b:fc:ad:4f:25:11:d7:d1:f4:ed:2b:ef:7b:df:2f:
a9:b9:81:df:7c:9b:96:3b:05:89:32:06:36:71:0d:
03:76:7f:de:44:9c:e2:3b:69:53:ba:1f:52:ed:33:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:B6:8A:CB:F3:0D:84:BE:DA:13:63:91:BA:9F:28:16:7D:5C:50
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:1c:30:65:02:72:ba:cf:9c:ce:94:1e:16:ac:49:f3:73:
dc:3d:ef:d8:e6:86:04:f1:11:bc:1e:18:b9:45:34:f8:22:3b:
76:07:4e:51:93:e7:6c:77:0a:77:e7:f9:87:a4:c7:33:bc:c1:
17:dc:2d:90:12:d7:fc:1e:7a:b2:b2:5d:fe:70:80:13:f7:15:
d3:44:1f:4f:aa:c3:f8:75:d9:6e:1f:81:ce:72:bb:fb:8a:72:
08:f0:83:c8:a5:34:57:14:37:58:ae:b8:d9:f9:49:7c:bb:22:
91:50:d7:ee:04:69:4d:ec:e4:a2:90:8e:73:c6:2b:6a:3d:47:
05:31:95:6d:46:f8:c1:4a:cc:f2:55:44:08:36:da:1b:cc:d7:
b0:4b:ab:95:d5:dd:08:4d:e6:89:ef:b3:e8:80:be:75:9d:be:
e2:4a:bd:87:1c:22:18:8f:c8:57:28:74:4b:58:d4:b5:d9:45:
fb:04:61:ce:7f:2d:36:2c:71:8e:0a:49:1e:d5:d9:65:c6:89:
a1:c9:9a:c4:91:b8:8b:8e:5f:f4:e3:1d:73:94:64:16:d8:80:
ea:43:b9:36:b2:77:73:79:a0:00:b4:63:8b:6e:f8:bb:55:00:
a8:fd:43:11:30:15:a4:17:5e:00:0d:36:ae:b7:62:1c:be:11:
92:d3:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:57 2025 by rpki-client