Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: wAwJGcsZYpHwXoMOB/HWfxp892ISpjMFvubkvS57y1g=
Subject key identifier: B3:42:E5:80:16:92:D3:32:EF:59:A7:54:96:EC:AE:2F:9B:18:13:A2
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 01988242A26B9EA3004A374E8F8E8F2F90F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 13C1
Signing time: Thu 07 Aug 2025 02:01:01 +0000
Manifest this update: Thu 07 Aug 2025 02:01:01 +0000
Manifest next update: Fri 08 Aug 2025 02:01:01 +0000
Files and hashes: 1: 7Cbq0-9TtgLYQeu52VZUWksHnwE.roa (hash: JkpuN02DfnBu6RSAax0V6uNhARwqnNXw/JbyXJtDiJ8=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: R7VA4ToZPOxrmaQuRW2fuqmyMyX0ddsfXKoKmKhthK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:a2:6b:9e:a3:00:4a:37:4e:8f:8e:8f:2f:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Aug 7 02:01:01 2025 GMT
Not After : Aug 8 02:01:01 2025 GMT
Subject: CN=b342e5801692d332ef59a75496ecae2f9b1813a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:d0:78:e5:ee:59:a2:a4:67:60:42:c0:0d:
9e:a4:5a:23:0a:0a:46:3f:fc:eb:c4:f3:9e:9b:c8:
d1:48:69:b6:39:af:c9:f2:98:4c:6d:86:ce:44:94:
73:b1:e5:fd:04:6f:99:a2:8a:13:fb:dd:8b:c9:97:
cb:ca:1e:20:a7:9b:85:62:8d:a7:ae:c7:65:2f:ba:
ba:7d:60:c3:3d:8d:16:69:4f:a9:89:c7:e3:f2:f1:
37:0c:08:ec:80:e6:fc:a9:00:8a:88:9e:e5:ea:51:
e7:1a:6e:70:07:32:a4:12:d2:86:7e:78:bd:11:56:
27:6e:26:72:7d:dd:1a:49:c0:59:01:58:d4:32:75:
c0:24:f2:5b:ec:b8:26:6c:1a:87:34:82:ab:c1:70:
24:ae:3a:ae:55:d8:e8:b3:ef:c8:05:21:3a:03:19:
40:43:a4:09:f0:1f:ab:f0:ac:63:ea:c0:e4:3b:2e:
2d:87:1f:ab:c1:02:14:af:d5:b6:4a:d8:ff:62:10:
cd:38:a4:ff:fa:eb:da:19:fc:ce:5f:f8:9c:38:7f:
8a:12:3e:89:41:53:6a:0c:56:d5:4f:0d:63:ac:88:
0f:27:1f:02:ce:40:80:1b:5d:39:f6:7c:c1:3f:d3:
be:6a:7c:fe:df:cc:65:57:07:bc:b7:46:85:36:d0:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:E5:80:16:92:D3:32:EF:59:A7:54:96:EC:AE:2F:9B:18:13:A2
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:04:f7:18:26:ac:71:f1:81:ad:0f:21:4e:58:8b:70:22:
14:c1:3a:58:1d:dc:3d:fa:9d:01:3c:b0:a5:6a:01:ed:38:88:
e0:5f:b1:9d:fe:d1:60:df:8b:c0:7b:f2:48:1c:aa:f2:60:b3:
2e:92:3a:b3:b4:54:5d:02:53:f3:47:13:2b:ff:dd:a8:14:28:
9d:25:30:77:b0:1e:a3:2e:14:66:4b:ea:e8:12:84:b5:4e:44:
fa:bd:40:5b:1a:67:0d:f4:a9:07:dc:3d:21:57:4b:aa:a2:4c:
50:76:62:ce:2b:34:4a:13:c3:bb:b5:f1:b9:15:21:64:a9:a4:
d4:a6:51:c0:50:72:04:d3:3f:48:09:a9:0b:af:95:7c:64:13:
be:d2:bf:63:8e:06:a9:72:9e:ba:5c:ef:33:3c:06:b4:42:9b:
8c:60:4f:61:30:7f:e7:04:c5:d9:b4:43:1b:68:66:a3:1d:74:
f1:19:cc:e6:66:8e:91:72:27:00:8c:dc:50:02:69:b5:61:1d:
7a:b9:10:d3:14:01:68:e5:b7:9b:c6:1b:ed:4d:4d:40:d6:f5:
b7:6c:dd:a7:92:81:c2:10:69:96:35:c8:75:67:83:ab:b4:ba:
ad:3e:e6:e1:02:0e:eb:c2:98:73:0b:2f:95:49:3d:54:cc:e0:
d5:e3:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:44 2025 by rpki-client