Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: z5/7boCSkOIoxKHY9sMjHEipgFcmE6A/b5oPR71obck=
Subject key identifier: C6:8F:AA:46:22:39:4D:32:E2:98:B6:EC:AE:EF:F8:FB:2D:A5:90:FD
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01987F784E1B4A63E0E1AD31B7412BE8084B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 13:00:47 +0000
Manifest this update: Wed 06 Aug 2025 13:00:47 +0000
Manifest next update: Thu 07 Aug 2025 13:00:47 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: /O/0KLRgnnH8zFO7B3TBvtlxcXWiuzcDTyAgCNhLTL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:4e:1b:4a:63:e0:e1:ad:31:b7:41:2b:e8:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Aug 6 13:00:47 2025 GMT
Not After : Aug 7 13:00:47 2025 GMT
Subject: CN=c68faa4622394d32e298b6ecaeeff8fb2da590fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:45:19:3d:4d:51:e2:e9:84:8b:5f:ef:48:
af:7c:00:24:6e:5c:9c:e6:37:e9:ce:c1:29:01:e9:
bb:19:96:47:2e:e1:45:bf:03:48:3d:8a:e8:11:e6:
57:03:9c:de:1e:a7:0a:ee:ef:d2:54:13:a7:16:d3:
2e:6a:91:c0:97:a8:cf:d6:08:e2:d7:c7:7c:46:6b:
13:3f:1a:2b:c3:c2:ab:7d:9b:dc:bd:19:7a:34:a1:
c3:0c:1e:78:c5:a5:42:92:af:96:fe:cb:9d:1f:61:
b1:df:46:8c:41:86:1e:d2:9b:d3:bd:3d:ae:c8:e2:
22:f1:d5:89:24:1f:88:eb:36:f7:b5:68:1c:f7:ee:
f4:6d:75:f0:26:fd:d6:5f:ec:0f:54:54:6a:e1:10:
b8:b0:2f:9d:c5:e7:2d:d6:31:d9:6c:72:5b:a2:f9:
47:95:85:0b:60:50:1c:23:f3:a2:c5:40:9a:f1:35:
de:b4:59:e5:6f:74:2d:fd:fc:29:02:62:1e:f0:3e:
5f:16:21:ea:1e:f2:8b:12:86:51:8e:7f:7d:40:9a:
a2:bb:2e:4b:72:d7:48:cc:de:0b:08:9b:2b:55:7b:
fd:9c:26:76:f0:9f:ca:6b:f5:cd:a8:ae:fb:ff:3d:
62:2d:dc:e0:3b:33:8a:35:3a:30:10:ee:bc:cf:7d:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:AA:46:22:39:4D:32:E2:98:B6:EC:AE:EF:F8:FB:2D:A5:90:FD
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e8:1b:aa:f3:9e:15:20:1b:d6:dc:49:59:73:ac:86:50:7f:
39:c7:59:73:69:f9:d2:72:a6:6f:aa:6c:e5:ad:fd:59:dc:2e:
bf:01:cf:70:6e:a5:25:96:b9:9b:fd:71:b0:b7:1e:e5:08:6a:
a7:e4:89:7e:6a:ed:9c:b1:92:bd:5d:f8:f8:c7:73:02:97:eb:
44:65:3f:1a:d3:a6:db:cc:e1:b4:11:66:c4:01:e9:17:9a:e9:
9d:83:88:b5:fe:36:61:ec:6f:55:be:e6:51:61:5d:e3:b0:20:
6d:00:ad:28:30:16:43:39:bd:28:88:af:e1:6d:bc:e4:82:49:
fc:f6:83:6b:e5:db:c5:cd:19:32:f3:1a:bc:cf:45:68:1a:2b:
ab:37:60:26:8f:66:a9:f7:b9:3e:04:4a:f3:76:3b:37:6d:79:
11:af:f1:a6:92:0a:d1:ed:f5:86:37:0a:54:c5:ae:e6:35:97:
97:de:31:03:56:db:92:ff:bf:3e:a7:ce:44:9a:63:6e:45:f8:
5c:2a:f2:9f:72:20:4a:18:c2:6a:b7:aa:2c:1e:da:c7:c4:a7:
0d:e5:2f:10:21:e3:94:09:0b:55:c5:16:73:60:44:ee:51:25:
89:1d:cc:f9:0f:ea:f8:1d:3b:dc:58:4f:4a:08:72:a1:64:3b:
f6:45:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:12 2025 by rpki-client