Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: Ga7pTw6Pp5o48geIRRXu9eGCzZZ9+MGs1nov1WAICyg=
Subject key identifier: 16:FD:4E:B2:BF:0B:DB:81:96:33:66:99:1D:35:48:2F:04:35:A1:99
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 0198A04E89E8D28B51A71305B0DB70C1957A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 22:02:38 +0000
Manifest this update: Tue 12 Aug 2025 22:02:38 +0000
Manifest next update: Wed 13 Aug 2025 22:02:38 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: D3DJTUJIEBbGjcB+rgZ7/MbPICPmaOpJDdPk2g9oRJ8=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:89:e8:d2:8b:51:a7:13:05:b0:db:70:c1:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Aug 12 22:02:38 2025 GMT
Not After : Aug 13 22:02:38 2025 GMT
Subject: CN=16fd4eb2bf0bdb81963366991d35482f0435a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:37:27:2d:35:b4:de:a4:ec:66:5e:66:9f:
00:e8:f4:34:c1:da:28:da:d6:96:34:75:5e:e2:46:
98:6c:0b:bf:d7:9b:53:ba:ab:f9:b4:81:a2:a4:0a:
ec:f9:dd:6c:1f:67:f2:e3:1e:7d:90:a5:72:06:4c:
e0:4e:4f:97:8c:06:a1:e9:f2:f9:9b:4f:c0:bc:90:
cf:12:aa:ba:45:9e:5b:e2:57:15:b3:9e:70:77:a6:
f1:ad:b6:03:87:d3:37:ed:71:fa:8d:6c:e4:fa:68:
8c:df:d4:94:d6:85:88:61:1a:b9:72:94:c9:8c:3b:
31:46:5f:0d:2b:a1:eb:cd:86:9e:41:91:0d:b4:d0:
fc:bb:b2:d6:62:ea:dc:db:8f:ee:35:f0:08:6f:5d:
81:bd:99:8f:a4:24:2a:d7:8c:bc:2d:94:58:83:3d:
14:97:e1:76:af:1e:19:b3:94:54:9f:77:e2:4e:c0:
1a:39:05:b1:9b:f0:e7:a8:ed:09:34:a5:a3:f6:41:
a8:99:a0:e1:62:16:2d:0b:a5:19:79:62:85:cd:fd:
bd:8c:01:f9:6f:dd:0e:10:50:f5:6f:cb:54:0b:bf:
53:9d:44:f7:78:4a:55:c3:30:56:cd:ce:ca:a1:5f:
36:b5:93:2a:24:19:21:da:c9:1b:79:4b:35:98:c9:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:4E:B2:BF:0B:DB:81:96:33:66:99:1D:35:48:2F:04:35:A1:99
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:1a:be:1c:fc:36:47:29:3e:40:2e:05:8c:5f:a6:7d:0e:
93:0a:5d:49:9c:1f:c8:82:c7:1b:22:04:2e:4c:fd:5f:65:5b:
79:fe:83:36:a2:95:76:c8:ef:ac:db:2f:c8:e8:0e:7d:e6:f1:
9d:4e:6a:7e:1e:2c:42:01:c1:55:01:86:8e:c8:7f:82:22:e3:
20:f7:b3:b8:5f:17:58:7b:49:8f:b8:c9:3e:99:cf:b5:d1:a1:
92:6a:4c:34:60:0e:54:0e:61:58:6a:49:74:00:8f:dd:1c:74:
3e:b1:76:2c:16:29:3d:08:69:f9:a5:7c:ce:10:1c:28:af:13:
fa:50:36:2b:13:df:41:53:22:af:bb:3c:2b:d9:30:e8:3f:43:
99:87:90:b4:8f:88:7a:f2:d8:9a:61:9a:da:54:2e:93:e9:be:
21:3e:7c:6e:ab:7a:c7:77:91:16:a2:18:7e:2a:e4:97:fa:58:
59:09:4b:6f:f6:fc:b2:ed:3c:57:26:f1:f6:bd:b9:41:1d:92:
dc:5a:d7:2d:bf:7a:af:15:6c:e0:c0:a2:5e:55:29:22:f3:15:
06:4e:30:da:14:29:c5:1d:56:58:c2:b3:d1:6a:be:c2:13:7d:
12:d9:f9:51:08:bd:74:16:f7:13:a4:76:05:0b:ce:ee:67:b5:
2a:ea:8d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:03 2025 by rpki-client