Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier: wywUs16j3+m64arSpunnCroGfYNqPg27PPFknsGo9Q8=
Subject key identifier: C3:94:68:29:02:A0:DE:81:22:13:F1:E9:2F:C1:F0:98:DA:75:1B:7F
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 019874BE6FEB8080F87F7DD5EE5F195A418F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number: 0BDD
Signing time: Mon 04 Aug 2025 11:01:34 +0000
Manifest this update: Mon 04 Aug 2025 11:01:34 +0000
Manifest next update: Tue 05 Aug 2025 11:01:34 +0000
Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: pRWpn5ft/ZluvVR6buaWZwEceoGT2q4WmJrOsqfwcUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:6f:eb:80:80:f8:7f:7d:d5:ee:5f:19:5a:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Aug 4 11:01:34 2025 GMT
Not After : Aug 5 11:01:34 2025 GMT
Subject: CN=c394682902a0de812213f1e92fc1f098da751b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:58:53:3e:00:54:72:4d:51:f1:bc:be:ef:
b6:69:8c:f2:a4:e8:b0:4e:08:0d:e7:7c:33:9a:8f:
70:48:aa:77:3a:9f:88:54:24:2e:05:de:d4:90:03:
f7:b5:81:d5:70:13:af:bb:ab:20:a6:c2:29:1e:cf:
98:7f:f2:73:ec:d3:ee:69:9f:51:65:f2:9d:12:dc:
cd:79:74:b1:7c:42:70:83:83:81:ff:f7:87:56:c3:
ae:e6:0b:4e:a1:5a:b3:c8:35:23:db:23:a2:9b:c8:
8e:68:49:21:2b:19:33:e0:19:c1:96:07:e8:cf:2c:
99:40:68:54:90:de:94:33:c5:5b:34:2b:c5:f8:da:
59:e1:c5:7e:99:65:bc:57:a7:35:eb:83:f7:bf:b3:
33:c6:62:f4:ce:eb:47:b5:a8:fa:e7:3d:7c:98:d4:
70:08:7e:dd:96:d6:1b:bc:3c:0a:e8:59:e1:cb:49:
a4:14:92:f0:7b:56:56:68:de:12:11:60:07:3b:4b:
92:5a:42:00:d0:ed:50:f3:a4:1c:d0:cc:3c:fc:ed:
9f:2a:e8:08:e7:4b:90:5f:33:c0:c9:be:c8:a3:bc:
23:50:6c:45:f4:d7:c0:11:6a:1e:1c:c9:ed:57:86:
87:bc:96:3b:44:57:18:59:76:43:58:cf:1f:a5:74:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:94:68:29:02:A0:DE:81:22:13:F1:E9:2F:C1:F0:98:DA:75:1B:7F
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7a:25:67:98:13:de:1c:ab:e4:7c:46:c1:99:2d:5d:66:9f:
5e:48:1e:e6:7a:ca:a6:98:1a:dd:de:cb:f4:6a:f6:95:15:a5:
10:00:94:27:b1:b2:9c:19:45:c1:15:52:6a:6a:3c:ea:35:32:
56:af:8f:e6:6c:fa:e8:17:09:db:77:6c:be:1c:42:34:8a:c3:
f0:c5:92:e2:7f:c1:af:b9:a7:e3:d6:35:6a:b4:01:41:32:fe:
b4:4b:9a:ac:4b:82:e7:02:ae:6a:b8:91:78:dc:ab:d9:d7:17:
fe:95:64:41:e9:76:20:6a:7d:69:9f:35:d5:cb:36:b3:7e:27:
2f:a1:06:bf:80:cc:1b:8c:a4:48:49:36:fe:83:41:ee:63:98:
64:92:24:37:55:df:19:ef:17:b0:1b:eb:e4:63:9c:8a:20:65:
5f:03:41:77:b1:ae:78:ce:f8:1d:64:30:49:4e:18:7d:87:a8:
1a:22:e2:2d:8b:b6:72:28:39:a7:f4:56:79:9e:7c:19:93:4c:
b9:18:4b:54:3f:85:4e:45:a7:c8:20:9a:d2:52:d7:41:de:d9:
c1:7c:ae:08:b5:d2:33:d6:17:13:d3:fb:43:9d:28:04:6d:80:
5e:58:86:00:be:d6:33:79:82:06:e6:74:16:d4:8c:5b:4b:04:
59:c1:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:41 2025 by rpki-client