Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: dDkqkmMxcLmXe6AAj3Dq/lVal4VyRM12bGu0++lBvno=
Subject key identifier: C8:75:B7:A7:E2:27:B7:62:41:33:AB:1A:89:C6:A3:80:94:E7:61:43
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0198868CB9F2A3F6A97CD0536F7C866F53A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 03F9
Signing time: Thu 07 Aug 2025 22:00:26 +0000
Manifest this update: Thu 07 Aug 2025 22:00:26 +0000
Manifest next update: Fri 08 Aug 2025 22:00:26 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: DVaJhMk9RhsiBhUpBLCfNII4YrpJryfDm8/3ZuDomVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:b9:f2:a3:f6:a9:7c:d0:53:6f:7c:86:6f:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Aug 7 22:00:26 2025 GMT
Not After : Aug 8 22:00:26 2025 GMT
Subject: CN=c875b7a7e227b7624133ab1a89c6a38094e76143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:4c:a8:11:04:af:ef:d1:db:90:0e:ec:ed:
9e:61:c9:77:a7:98:41:3e:39:f3:cc:b3:1e:e3:cc:
87:7b:70:03:02:ae:e5:35:2b:fc:e2:9f:f9:be:4c:
13:0d:f8:96:ff:d1:31:ab:85:ae:63:51:8a:0e:b1:
b5:0d:41:87:ef:18:d5:91:15:03:6e:c9:4b:06:8e:
10:ec:d6:b5:0f:9b:ab:54:85:c8:b6:b6:bd:db:43:
c4:90:16:d1:0a:3a:a1:a6:b4:9b:41:a4:cc:1e:ff:
da:0e:c3:e7:86:34:eb:de:dc:02:3b:49:6f:de:ec:
b4:8f:f8:a9:a3:8b:11:b4:64:b5:01:ff:5c:88:41:
c2:d9:cd:dd:59:94:49:d0:2e:ea:4d:b7:4a:9c:29:
33:97:b9:7f:ec:22:a8:15:5c:e3:55:b4:13:79:4d:
1b:12:77:23:92:6c:10:50:46:d8:d1:3f:53:0b:2e:
c7:d1:e5:b2:bd:79:89:8b:0f:63:71:3f:6c:76:e0:
1e:58:54:42:27:45:55:ce:a6:11:6c:88:2b:18:7b:
3e:fc:9a:ed:18:d6:25:b7:7f:27:48:37:53:61:da:
02:62:d7:6e:30:82:9d:54:b8:40:07:d4:81:de:ee:
12:03:9f:d4:ff:a7:22:e9:10:b6:c2:6d:ed:e6:10:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:B7:A7:E2:27:B7:62:41:33:AB:1A:89:C6:A3:80:94:E7:61:43
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:24:1c:f1:83:45:81:91:43:cf:c2:a2:14:9a:d4:2a:c2:9b:
b6:53:32:1e:57:70:84:48:72:cf:07:39:8a:3a:c1:05:08:f1:
6b:c0:eb:d6:0d:c7:78:af:50:80:5a:e3:9b:16:06:8a:4c:87:
1c:8e:0b:90:ff:e4:b2:9f:2e:c5:0d:ef:50:9c:65:dc:b2:c4:
23:1a:9e:57:d9:0b:d6:ed:47:0c:bc:76:b0:d8:f0:0b:90:fd:
6e:f1:79:a7:c1:f5:ad:ff:07:7d:15:90:7a:8e:62:fa:04:5d:
e6:e1:ad:79:7d:97:ed:69:55:22:d4:c7:e7:eb:ab:73:09:f3:
41:d0:2d:6c:a4:29:99:ac:0b:db:f2:a0:77:52:c2:9c:b4:72:
bf:7e:c3:02:4f:72:5c:8a:54:b9:c5:73:de:4b:5b:d9:f4:d4:
7a:d5:58:c8:97:3e:73:2d:5b:2a:75:54:c7:ed:8d:1a:dc:b8:
7a:4b:91:88:42:c7:1c:4e:27:2b:4b:47:c4:e2:f7:67:9b:7c:
cf:cf:c9:e3:09:04:3f:74:19:70:6b:05:02:b0:df:fb:72:a7:
06:74:a6:4d:4a:50:3f:4b:f6:e2:3a:b0:b4:86:e9:9d:f7:8b:
ee:b1:a0:f3:75:6d:f6:4e:b0:1a:19:b3:78:66:3d:a8:14:ed:
db:6a:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:25 2025 by rpki-client