Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: R7O4TfAuiM87D8XpuLNaHnr4H+el/hoI70441+yZ0s4=
Subject key identifier: 7B:EC:C3:93:08:89:FA:3E:B7:F9:AA:10:09:5C:ED:51:A1:65:4D:B1
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019873E22A5325E05E3B4A7BFAACB37BDEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0C04
Signing time: Mon 04 Aug 2025 07:00:58 +0000
Manifest this update: Mon 04 Aug 2025 07:00:58 +0000
Manifest next update: Tue 05 Aug 2025 07:00:58 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: N8Ml9vRJoo8S56Sm7w+sgzUvFyZ13FYZByfYlyyggBU=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2a:53:25:e0:5e:3b:4a:7b:fa:ac:b3:7b:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Aug 4 07:00:58 2025 GMT
Not After : Aug 5 07:00:58 2025 GMT
Subject: CN=7becc3930889fa3eb7f9aa10095ced51a1654db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:d9:5c:eb:3c:94:aa:3b:ff:ed:69:3d:40:
ad:eb:46:c1:81:df:70:27:20:56:11:39:92:c2:12:
af:cd:60:bd:b5:a5:ce:50:d1:d8:ef:b5:e3:36:d8:
63:d6:95:3a:e3:30:23:f5:07:f1:4c:a8:0d:5b:d5:
97:9b:6d:ce:bd:d2:b1:bc:95:71:b5:36:98:54:fb:
59:fc:02:63:42:fc:50:85:88:44:1a:70:dc:b4:88:
c4:3c:97:25:bd:4a:d8:82:8b:a5:84:f5:77:4b:61:
04:4b:09:a4:c6:1b:42:58:34:bb:a1:f0:79:2d:1a:
44:37:35:ee:8b:bd:04:d7:0f:ee:58:38:a8:24:4f:
1c:20:72:fd:57:4a:a4:d4:c6:31:c6:bb:8d:a9:a9:
ee:5c:b2:a6:21:94:d7:d5:03:5a:df:ef:34:c3:bf:
e5:38:de:d7:15:54:1f:51:da:76:5b:26:04:d1:99:
69:13:19:b4:17:fb:0b:2c:6a:8c:e0:67:36:c9:ef:
39:b5:f3:43:16:c8:10:72:6a:d3:f2:96:74:d7:4d:
71:a7:e4:44:92:70:a2:f4:b9:cc:b6:7d:e1:77:73:
7f:01:6d:f9:7d:4e:8f:74:58:44:94:20:b3:1a:31:
3c:82:23:bc:4f:8b:0c:f2:b8:65:01:6a:f7:69:48:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:C3:93:08:89:FA:3E:B7:F9:AA:10:09:5C:ED:51:A1:65:4D:B1
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:24:b5:ca:f2:07:41:55:83:c9:77:03:2a:14:b7:3b:fe:
ae:5f:10:31:a6:0e:da:35:b2:44:bb:25:ca:47:8d:40:84:1e:
bd:4e:cb:98:ea:fb:f4:9f:ba:9c:5d:db:20:13:a8:b5:6a:98:
df:a7:c6:68:4f:0c:68:78:1d:c2:6f:b7:8a:35:cc:69:30:66:
54:e6:7a:bd:80:aa:aa:34:5a:f0:54:5a:b9:b0:10:25:f8:c7:
1d:15:9e:0d:a6:de:8e:c9:52:28:20:63:bd:9a:2e:58:39:1d:
f3:c7:9f:de:83:79:01:e5:e2:c4:2f:d3:37:f7:28:28:bb:5f:
98:79:a5:4c:71:5e:b5:ca:f5:4f:e4:90:e5:35:e4:66:e3:e2:
9b:12:04:55:2e:3e:34:f3:db:00:fb:cd:0f:04:c9:9b:de:49:
75:d5:34:21:12:90:47:e8:1a:1e:b5:ef:ca:e4:b8:4a:cc:89:
89:ee:6e:17:8f:ad:54:e2:f0:2d:e3:41:ff:68:15:61:e7:21:
3a:dc:13:8a:94:5d:f6:06:44:88:4b:4c:7c:cc:2c:da:bf:17:
e2:8e:0d:fc:e8:db:59:b4:c3:c8:44:02:da:28:ae:28:1f:e6:
ce:7c:77:06:c7:94:83:fc:c8:50:c2:78:2a:1b:37:a5:10:5b:
34:83:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:01 2025 by rpki-client