Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier: uMO8v+VGBKs+z6zoBXDpqVnjS6tBBLOTQGrkRtE9oaY=
Subject key identifier: C5:B6:7A:B4:37:0C:07:BE:CF:A3:54:8F:3C:F8:C1:F2:DB:BC:A1:A9
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 01987F0A465BAE91B697B9B2FEF0DD713B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number: 0706
Signing time: Wed 06 Aug 2025 11:00:36 +0000
Manifest this update: Wed 06 Aug 2025 11:00:36 +0000
Manifest next update: Thu 07 Aug 2025 11:00:36 +0000
Files and hashes: 1: cCGgeXQG7w7JJ0VVtoCaqK0Nuk0.roa (hash: OWS86sPN3Xs5u+J3GeHiIwJ0UACEogG9zbUxH/qhnWU=)
2: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: P46Zh+AlLn/zVwhtK8otIDTkUniwVVAlLER9PCA0G8Q=)
3: x4XI86xuT3wsfzGO7m_2JB-s4p4.roa (hash: Dt7gE1TI/UXgmAj9V+d2Jv58edUR433oJyH6DVwQHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:46:5b:ae:91:b6:97:b9:b2:fe:f0:dd:71:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Aug 6 11:00:36 2025 GMT
Not After : Aug 7 11:00:36 2025 GMT
Subject: CN=c5b67ab4370c07becfa3548f3cf8c1f2dbbca1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:8b:d7:54:f0:c2:42:e0:b0:df:60:c8:38:
a8:71:41:aa:6b:54:5b:cf:34:9e:88:a1:3b:e2:50:
a3:f5:4d:98:80:d6:5c:1f:f8:8c:bc:c6:96:2b:47:
5c:ee:b3:21:0d:84:e8:d2:28:16:ce:87:14:dd:ea:
1b:18:19:c9:47:10:eb:2c:d9:c8:6c:28:f9:f7:b4:
c4:04:f3:ce:4b:77:03:da:1d:7d:a7:71:89:19:ad:
85:ae:92:a4:ab:71:ac:1e:31:9b:c5:c0:9d:19:48:
35:76:8c:34:b7:35:6b:01:08:53:45:f1:8a:94:53:
3f:e4:ca:8f:6d:af:4d:ee:cf:b8:e6:00:97:8f:c8:
b1:32:77:ec:49:b8:02:88:ba:2d:a3:74:2c:62:1b:
d6:50:72:49:e3:d5:c7:4b:99:59:98:14:08:61:46:
7b:e9:a7:fa:4a:eb:4b:b9:b5:75:87:2e:4b:88:b6:
e8:5a:28:39:4c:36:29:bc:ee:e8:0b:d3:a8:be:13:
7a:a2:19:94:5f:32:b7:f4:74:ed:8d:04:b7:c1:1f:
20:b8:69:b1:0c:ad:95:34:90:48:ac:68:67:81:e6:
a2:22:3b:c9:b0:bb:7f:8f:8e:23:ff:93:5e:4c:41:
0c:8b:44:df:fe:d6:7e:a6:05:75:8d:44:a3:2f:34:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:7A:B4:37:0C:07:BE:CF:A3:54:8F:3C:F8:C1:F2:DB:BC:A1:A9
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:c6:30:b9:8c:1f:b1:4a:bc:cb:28:43:9b:d5:c8:6e:cf:
99:7e:17:5c:26:a4:45:52:25:40:ec:a9:07:ff:be:df:9e:60:
b2:a2:30:d3:49:81:d1:0f:68:a0:fc:54:ea:e4:a9:63:6f:67:
9c:5c:b3:f3:0b:b4:8c:00:6b:3f:d3:72:8f:e8:66:2f:43:fc:
71:41:1e:d1:15:0c:57:47:98:61:27:be:16:ae:3a:35:f5:69:
a0:97:1f:8b:c8:9f:ac:a9:91:4c:05:ed:46:54:6f:16:a2:26:
a6:28:42:1d:6a:30:4b:52:e3:b8:bb:ef:eb:73:c8:e1:d9:a2:
79:dc:13:9d:cd:43:f2:1f:2b:98:18:77:df:23:c0:74:e6:c0:
f1:7a:81:7e:eb:10:f4:37:8e:af:f4:fc:10:7d:9f:9d:05:0f:
ef:ea:50:1e:ec:e6:b9:06:8c:a9:a3:30:a6:0e:4d:5c:27:24:
dc:e4:50:f6:aa:cd:d6:74:27:e1:85:ad:0e:0a:03:7c:ad:ba:
0c:2d:f4:27:84:0f:48:89:d8:f3:c3:bf:a9:43:cf:76:a5:36:
07:19:3e:3c:0a:70:69:66:10:8b:4c:3e:41:dd:50:8a:14:4d:
93:7a:92:1e:e3:05:df:11:79:1e:bb:9d:a2:20:0f:76:df:ea:
26:74:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:10 2025 by rpki-client