Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier: DahnTobwE5Rkjk9Ke0RUB+3m1Ja6WfidX1Iljr4QPbY=
Subject key identifier: 05:F4:9E:F4:FD:FB:7D:48:F4:C4:B4:8E:DA:B9:50:86:DE:1C:04:21
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial: 0198819DBD7DA7F4569054D3C355C229BDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number: 07C8
Signing time: Wed 06 Aug 2025 23:00:54 +0000
Manifest this update: Wed 06 Aug 2025 23:00:54 +0000
Manifest next update: Thu 07 Aug 2025 23:00:54 +0000
Files and hashes: 1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: UfuZXNSqyhhlFPHn1huVHRCYTpX/1SGRr8ZwARK67us=)
2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:bd:7d:a7:f4:56:90:54:d3:c3:55:c2:29:bd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Validity
Not Before: Aug 6 23:00:54 2025 GMT
Not After : Aug 7 23:00:54 2025 GMT
Subject: CN=05f49ef4fdfb7d48f4c4b48edab95086de1c0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:c2:4d:5e:e6:64:ca:80:9c:f2:9f:36:8d:
ba:20:fc:a8:fd:5c:20:9d:51:a6:17:5d:d6:88:4a:
b4:44:9a:8b:a8:67:ed:39:07:cf:8e:3c:cb:b9:f7:
c7:96:36:9f:9f:a6:12:e5:63:a9:48:24:df:27:4b:
91:d1:d4:d8:45:9d:19:8b:c3:b9:22:55:7c:e8:57:
aa:d8:0f:87:0d:85:d6:3f:be:54:8e:58:47:f6:d4:
1c:98:b1:20:ce:93:21:bb:96:82:74:4c:46:ee:e0:
20:61:8e:9d:7d:2f:48:ae:93:30:a3:72:f7:08:2e:
f4:16:d8:8d:f2:db:ce:48:08:9f:47:fd:8e:69:00:
6a:ee:e0:c6:dd:c3:42:69:d6:13:4c:fe:5d:05:9b:
2c:12:75:f6:7f:79:cf:59:47:21:8f:bb:40:3d:53:
95:ac:fc:c4:52:9b:cb:9c:f1:00:f1:99:3b:d1:92:
70:2b:9c:e9:ec:4b:f6:94:af:c8:bb:39:63:9e:3a:
1c:da:48:b9:d8:51:76:d3:1f:37:f7:f7:aa:75:b1:
81:99:b8:6d:c0:d1:c1:41:bc:c6:28:df:30:43:64:
b0:f8:c9:7d:c2:ba:39:aa:bc:26:06:e1:db:b3:a0:
5c:5b:88:db:b0:54:72:e1:95:c4:13:a3:7c:10:fd:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F4:9E:F4:FD:FB:7D:48:F4:C4:B4:8E:DA:B9:50:86:DE:1C:04:21
X509v3 Authority Key Identifier:
keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b9:db:b1:28:a5:21:41:95:36:54:c5:9c:12:3b:e2:50:37:
59:a5:2a:bd:ce:35:a6:de:2d:57:07:84:75:d6:d8:b7:fe:b1:
f2:4c:95:81:d2:34:e7:c9:bd:5f:ca:86:73:68:bb:38:af:62:
78:46:cf:ce:5c:ab:31:26:7a:81:36:4e:7c:b7:80:71:11:20:
55:ed:76:fa:a7:82:d5:7b:a4:07:62:37:8d:53:7f:62:b4:69:
73:78:27:d5:9e:85:11:62:90:5f:f4:e1:23:47:3d:0f:a1:d0:
d6:30:28:ab:4e:c3:7f:68:3c:4f:2b:47:7b:c8:73:45:7a:24:
28:4b:cf:c2:6c:04:ab:86:a4:1f:a4:86:1c:4e:e3:cc:d5:d3:
c7:3a:54:b6:16:0c:f8:a6:65:af:0d:9e:75:b5:0d:5a:80:b7:
54:8f:44:9f:b5:60:7a:82:93:32:9b:9c:a5:df:41:ec:86:fa:
9d:1d:b8:02:f7:48:76:f0:26:5c:09:27:c5:5c:7a:58:58:49:
4a:7d:52:15:1e:12:d0:55:f8:a6:d7:18:af:53:a5:21:0d:a3:
5d:ba:e9:97:95:b7:a0:dc:b6:b4:bd:92:7c:a8:9c:ce:ef:9b:
79:21:68:ac:5a:92:5e:42:1a:e5:13:2b:fe:8b:9f:9f:94:8e:
68:df:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:51 2025 by rpki-client