Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: sz3pp4xuXShu5QhLv3DLlKr1OsW3dI2K6L+bU8EzVdQ=
Subject key identifier: AB:FB:B4:05:D9:59:E6:5B:7E:11:AA:E8:DE:7A:C5:4F:F7:AB:A2:E1
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01987BD2A7F6403A6884235E5CD8A4953F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 20:00:59 +0000
Manifest this update: Tue 05 Aug 2025 20:00:59 +0000
Manifest next update: Wed 06 Aug 2025 20:00:59 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: Y1KVlH0eIS26Z9bNYhRG+Vk0dZs7UQbcm/9WxwbovMU=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a7:f6:40:3a:68:84:23:5e:5c:d8:a4:95:3f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Aug 5 20:00:59 2025 GMT
Not After : Aug 6 20:00:59 2025 GMT
Subject: CN=abfbb405d959e65b7e11aae8de7ac54ff7aba2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:4e:44:3e:cf:4f:f6:a9:b6:84:c1:50:f8:
fd:c6:a7:ee:6e:e6:dd:35:5e:c4:54:ba:26:d8:72:
91:d2:d9:d6:70:c4:63:21:a9:eb:1e:1a:d7:f0:e7:
5c:4d:82:4a:db:93:49:69:f6:62:a8:7a:00:26:a6:
ee:7b:ef:f6:ed:22:65:df:30:3c:8a:a1:06:53:c7:
c6:4a:da:0c:d3:10:9c:6c:de:52:e4:7e:07:91:c4:
63:a3:c2:aa:11:52:e4:37:3b:e2:95:c1:56:f6:be:
8d:63:d0:10:33:11:c1:a0:70:80:22:47:6d:13:0b:
cf:07:31:a2:e7:83:93:fa:ea:0c:52:75:97:df:17:
43:4c:12:3b:f8:cd:34:67:36:bd:22:81:cf:73:c9:
07:3f:ea:41:bc:9a:b3:87:93:ec:7f:30:eb:e4:ff:
29:40:fc:6f:b1:a9:af:c4:1b:76:30:f0:03:87:ca:
8d:49:d6:78:62:32:0a:29:07:36:60:70:93:80:9f:
7f:91:c6:d2:1d:3b:20:da:07:c6:23:38:95:e4:9f:
14:c6:ca:a1:07:eb:6b:99:93:c7:59:17:6a:86:78:
59:19:4b:fe:8b:0c:46:ab:44:b9:d0:19:28:a4:d3:
2d:67:c1:0b:14:dd:07:02:fc:49:20:b1:90:55:f8:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:B4:05:D9:59:E6:5B:7E:11:AA:E8:DE:7A:C5:4F:F7:AB:A2:E1
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a2:e6:1b:09:f5:1d:20:04:96:6d:a8:3b:a5:35:dc:a9:37:
c9:1c:27:5a:0b:e1:d7:84:71:a4:fd:86:28:ba:eb:75:07:aa:
47:ed:b4:5d:20:59:60:3b:00:b5:8c:be:56:4e:77:9c:51:3f:
32:d2:7a:4a:f3:0c:35:46:a6:ad:ed:0a:b0:04:23:0f:c1:85:
06:87:43:7d:1d:8f:c1:5c:30:ac:fc:60:b2:d2:fa:d5:ff:5d:
c1:8c:3a:12:3b:da:cb:61:e7:9e:59:04:45:47:81:aa:0b:80:
82:8b:ac:76:40:d2:41:0a:fc:86:b9:26:fa:9e:51:41:87:c3:
fe:b0:c3:44:46:80:df:73:96:2b:e5:9c:a8:a5:ac:88:30:6b:
5d:b9:7c:c0:fe:5d:41:48:a5:6e:49:bf:b8:1e:23:86:e7:f1:
ce:15:44:0c:2c:ac:1a:a6:7d:35:4d:7c:20:16:a1:39:b9:26:
82:a8:61:17:80:2d:cd:4b:f8:fd:b5:32:60:71:97:18:fa:21:
1f:c0:67:99:cc:46:3c:03:a3:d0:3e:f4:02:b3:67:02:e6:a4:
27:35:17:f4:94:76:6a:53:fe:d3:b3:89:cb:89:04:de:e6:00:
bd:08:74:e8:41:47:1c:5a:f9:5a:cb:fb:41:5f:4c:e1:6c:53:
e8:95:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:51 2025 by rpki-client