Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: /3EVZzPtbFb3bfXaVkMdS9w5cGr7dDk7O5PPFzsSrsM=
Subject key identifier: B4:90:2C:99:94:CA:37:8D:83:27:26:22:42:AF:F9:3C:F1:0B:0D:76
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 0198A04DCB274712BB62A16C9DD1AF88D7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0270
Signing time: Tue 12 Aug 2025 22:01:49 +0000
Manifest this update: Tue 12 Aug 2025 22:01:49 +0000
Manifest next update: Wed 13 Aug 2025 22:01:49 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: 6ZZ6qq/tdlU475h9eGMOi6bU3casjHqClptfnI7Gd70=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:cb:27:47:12:bb:62:a1:6c:9d:d1:af:88:d7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Aug 12 22:01:49 2025 GMT
Not After : Aug 13 22:01:49 2025 GMT
Subject: CN=b4902c9994ca378d8327262242aff93cf10b0d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:49:56:35:d3:54:7b:df:7b:b3:53:d3:ad:
05:aa:f9:de:53:1c:a9:c8:17:0d:a4:f9:6e:82:dd:
00:fd:c0:89:75:81:9c:7f:7f:67:d4:5e:7f:36:64:
c1:2f:6f:51:2a:4e:99:05:71:f6:d3:c3:45:b0:48:
e2:28:44:5e:3f:1c:fd:d4:cb:87:97:c2:ab:0b:fa:
1d:13:a5:c7:b7:e6:16:92:45:56:70:02:e8:83:b2:
42:4b:dd:c4:a6:34:18:a1:ee:03:47:90:b7:d6:0d:
57:ae:b0:91:d0:fb:23:da:b1:15:1b:dd:8a:d0:52:
50:08:8e:4b:8b:b6:ac:c6:54:4f:f2:1f:ee:cf:30:
3a:5f:3a:ea:bd:6c:bd:a2:85:5b:e0:c9:10:a7:3e:
fe:d2:ea:ac:a6:5b:b4:7d:fb:ff:4e:62:b0:ed:a4:
c0:e8:da:15:a3:60:8c:85:d9:3c:49:8c:e3:0f:0f:
12:12:2e:23:de:b8:e5:5c:5a:a3:3b:7c:bc:a5:26:
d7:13:21:97:fc:d6:b2:db:1b:f8:7b:6f:e8:c1:ab:
02:17:30:45:ea:28:cb:e1:f1:ab:80:17:c1:73:41:
d3:6b:b9:fe:84:cf:5d:dd:32:8a:c4:89:72:de:70:
5a:89:c0:54:9e:b0:65:20:b9:c5:37:60:d0:28:69:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:2C:99:94:CA:37:8D:83:27:26:22:42:AF:F9:3C:F1:0B:0D:76
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:dd:02:dd:b4:a8:3a:af:73:3a:c6:2c:d0:41:dd:20:29:
ae:47:fc:e7:99:dd:0a:73:b4:da:6e:70:b9:97:b9:8d:c8:ba:
c7:9e:9d:75:dd:08:66:79:08:6f:46:9d:4d:00:72:bd:fc:bf:
1f:fc:20:68:6f:3e:a4:fd:9c:0f:c4:ee:ac:68:d9:ff:c3:23:
d2:72:ee:04:d0:2a:3e:3a:4d:24:93:3b:38:c8:9c:dc:0d:52:
7e:7d:b0:f0:f6:45:a9:20:b4:89:1c:39:d3:19:a1:9b:66:c5:
be:63:1b:10:cb:84:de:f3:5c:02:e9:7e:0a:2a:6e:23:c3:8c:
82:a4:f5:89:c7:a5:c1:7d:5d:0b:f0:fc:64:ae:c2:ce:8e:57:
83:e8:14:13:35:c0:28:f7:3f:73:3a:41:5e:dd:d3:d7:97:ef:
6c:23:7a:3f:ab:c8:1c:6e:c9:4b:b1:bb:5d:6d:4a:af:bf:ea:
11:cd:bf:9e:ab:72:f4:5f:e6:12:05:7b:78:42:23:5d:69:34:
6e:91:ad:d5:b9:cd:0c:8e:79:fc:a1:41:ab:33:9b:86:81:b1:
dc:dd:74:3a:c5:b5:a0:3d:03:7a:63:c0:dc:8d:c0:a0:03:a4:
8d:46:dd:ed:a2:4f:da:3d:c4:75:ee:ab:9b:1d:52:3c:9b:75:
47:95:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:30 2025 by rpki-client