Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: i8KN6cqbSO1XDon3hCe4DUztBmeKegkUn04vDbN96OA=
Subject key identifier: 98:D5:65:53:C0:1C:A4:13:DB:E4:8B:D8:EB:DB:0E:DA:22:FD:AC:79
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 0198820BC9EDC7BC985B19FBB02B3F591894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 01:01:07 +0000
Manifest this update: Thu 07 Aug 2025 01:01:07 +0000
Manifest next update: Fri 08 Aug 2025 01:01:07 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: 5u7PEf/gKsIxbIBJuSUsRDai+sxmsiLN0rsVapTb0fo=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:c9:ed:c7:bc:98:5b:19:fb:b0:2b:3f:59:18:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Aug 7 01:01:07 2025 GMT
Not After : Aug 8 01:01:07 2025 GMT
Subject: CN=98d56553c01ca413dbe48bd8ebdb0eda22fdac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:16:27:80:8a:cb:f5:68:8f:d0:7c:f8:43:
15:a7:bd:13:ec:cb:28:10:93:52:ab:65:9c:35:d9:
1f:91:05:3b:1d:9e:66:71:29:5a:27:4e:76:0a:c7:
cc:39:c5:3c:20:e5:0a:f3:70:c7:8f:f4:3b:bd:e7:
a6:87:65:64:72:69:9e:e6:8a:9c:80:3d:b7:1f:ae:
19:0f:76:dc:3d:c5:de:84:90:7a:36:f3:92:8a:eb:
a7:8a:43:b8:16:5b:6e:66:5e:65:54:58:d7:3e:ef:
1b:03:74:45:b1:f2:9d:30:7c:30:67:0b:f0:d8:51:
bd:47:8c:8a:96:41:04:68:a6:e0:09:44:89:28:68:
83:77:6e:14:ca:d0:12:a8:2c:0e:b1:5a:74:28:77:
0a:7c:c4:1e:a8:22:cf:b0:52:8d:cc:fa:96:02:5d:
29:dd:9c:81:c8:e8:e3:92:86:43:70:ea:6f:ff:0f:
ca:06:de:ae:82:50:c4:50:76:13:5c:4f:5a:aa:bb:
16:c3:af:f7:dc:a7:d5:8a:9a:0e:2b:b3:49:5d:cf:
af:85:bf:fa:37:ee:c2:0a:c3:e8:d9:de:3f:d1:cd:
3c:3e:6c:2f:76:30:15:54:a4:fa:a9:e6:15:1b:c9:
33:51:23:26:40:f5:89:dc:1a:55:ff:20:bf:de:19:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:65:53:C0:1C:A4:13:DB:E4:8B:D8:EB:DB:0E:DA:22:FD:AC:79
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:93:3c:5b:f3:93:22:c2:f4:fe:66:b2:fd:70:4b:8b:4f:
c4:a4:a8:a5:36:66:69:97:65:16:ea:5c:86:af:5d:20:2a:43:
25:77:63:3d:7a:05:d1:38:a2:57:6c:e0:c0:f6:d5:23:e1:9f:
67:eb:24:9f:2f:a5:35:69:dc:74:65:70:6c:fb:45:cd:00:e6:
2b:20:8d:c3:e0:f6:97:d5:c8:c4:de:e3:d0:7b:36:b6:da:50:
2c:b7:fb:47:ad:c2:2e:f7:9a:76:c2:76:5e:a3:5c:1a:fc:00:
b8:5d:1b:a5:10:1e:72:0c:f6:2e:94:7d:a1:7c:84:7c:33:5a:
d6:be:2d:96:8a:78:44:c8:93:03:a0:e0:9b:62:e3:f5:d1:99:
77:8c:ce:54:24:0a:ce:9c:f8:a4:62:e7:32:a6:22:a7:09:37:
80:fa:e4:32:de:cb:fa:18:1b:ce:82:3d:34:68:c1:57:96:e9:
29:31:a3:4a:25:17:d8:8f:1c:4c:08:14:01:cb:6a:08:74:54:
36:b1:85:b3:85:92:1e:3c:79:5a:93:cf:cd:20:37:44:54:5b:
2d:ec:62:3e:44:a3:c6:67:cb:f7:1a:1b:d5:fc:48:75:95:f2:
c0:ec:ea:97:7a:f4:9c:4e:68:97:a4:ea:05:31:94:af:0b:36:
e5:5e:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:19 2025 by rpki-client