Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: TzBnu8kqDUZQNrv7ZjmuUetC+HRyDAsDJo5LOKhC7As=
Subject key identifier: E4:76:CA:63:C5:4D:9E:0A:52:5C:81:D8:B0:4E:FA:29:18:C1:E2:F5
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 01988AA1025D74F14194F3115F37693D7E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0D17
Signing time: Fri 08 Aug 2025 17:01:04 +0000
Manifest this update: Fri 08 Aug 2025 17:01:04 +0000
Manifest next update: Sat 09 Aug 2025 17:01:04 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: EWlt8BGCIfOYGxvN2wezjaVG0wa+IhizvY6CHIz3WJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:02:5d:74:f1:41:94:f3:11:5f:37:69:3d:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Aug 8 17:01:04 2025 GMT
Not After : Aug 9 17:01:04 2025 GMT
Subject: CN=e476ca63c54d9e0a525c81d8b04efa2918c1e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:ff:25:b6:87:37:1b:46:2b:56:eb:a8:ea:
93:94:b8:1e:88:c7:68:be:34:0e:61:95:96:c8:1b:
e7:9b:fa:ea:48:a3:cc:ed:46:f3:84:d1:05:52:21:
36:67:ae:52:ef:3e:3b:af:a2:98:8f:a1:8a:d4:42:
26:59:6a:b8:91:ff:7a:2e:bd:2f:2a:a8:c2:dd:81:
2e:25:f7:ae:fc:c6:c9:eb:ec:d9:a5:d1:ed:29:ab:
06:61:00:04:1e:ab:80:9f:a1:50:0f:49:60:6b:a3:
a5:99:b1:df:c7:71:74:26:95:37:df:41:ef:09:c3:
64:ab:47:18:7f:2a:37:d0:fb:7d:88:7b:a0:df:68:
15:39:2c:c6:ee:67:aa:11:96:3e:8b:4b:7a:e3:69:
dc:b0:6c:8e:11:54:38:b3:5f:3e:3e:3a:82:d0:25:
f0:a5:24:cd:46:1f:35:53:2b:2a:6c:ea:13:ca:1f:
4b:d8:f8:b2:86:2b:16:2d:49:32:75:0f:ff:e7:4f:
39:e1:48:16:ea:92:f6:b6:42:97:39:4d:52:a2:59:
62:ac:bd:c6:a8:c4:8e:87:07:2f:59:d8:1f:61:15:
59:90:15:44:8f:58:da:e1:66:43:7f:cf:5b:67:06:
6d:af:dc:ab:1d:5d:db:17:2e:2c:51:2e:66:70:83:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:CA:63:C5:4D:9E:0A:52:5C:81:D8:B0:4E:FA:29:18:C1:E2:F5
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:f3:d1:5f:da:72:e7:73:7c:ea:fc:fd:a8:54:b0:0c:91:
bd:5f:1a:33:22:ac:cb:79:55:3f:a0:35:b4:5c:be:7f:87:92:
95:a9:20:a6:3f:e6:0f:ab:6c:23:fc:50:36:f5:9a:b3:0e:67:
22:bb:4b:a8:d5:9a:47:ee:c0:a0:6e:1c:34:5b:a6:55:c4:a0:
85:c5:e3:79:c5:6b:9c:af:15:b8:a4:7b:54:f2:2a:fd:4a:66:
a9:46:0f:dd:b2:49:51:4f:27:34:0f:f6:d9:d4:06:21:81:12:
36:45:df:e9:24:64:75:d1:44:32:99:83:62:4c:90:29:ae:fd:
e0:1c:e7:99:b8:fc:4f:c1:86:32:84:d9:dc:cc:1a:d5:c9:e7:
85:7a:f4:c0:32:4f:78:aa:e5:49:54:d5:99:3f:21:d1:bb:b8:
8b:d9:3c:e0:84:2c:55:36:3f:bd:5d:4e:a5:ff:47:a8:4b:47:
2a:28:64:94:4d:72:0e:65:a6:ea:71:77:56:ab:79:df:d5:38:
87:87:f1:92:2a:95:59:74:9b:16:9e:dd:4c:44:5a:80:f3:d9:
d8:23:8e:a4:4a:05:95:b9:6e:be:b3:01:f6:86:83:b5:ed:74:
bb:45:47:40:d0:53:27:f2:6f:e2:92:56:5e:2a:a2:ae:61:93:
84:81:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:13 2025 by rpki-client