Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: ujU+8kSNWFkEhJcDgtq4iN6ZZQ9fWNFDswj/5frtM0U=
Subject key identifier: 8E:55:6A:17:5D:67:ED:CE:90:86:71:CE:F9:C4:5F:6A:C7:FC:E3:6E
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 019874F4ADC05A4F200766116A70192BA434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0202
Signing time: Mon 04 Aug 2025 12:00:49 +0000
Manifest this update: Mon 04 Aug 2025 12:00:49 +0000
Manifest next update: Tue 05 Aug 2025 12:00:49 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: +Cz+LLp6NOHw+VqK8VGPRVipLCtNirBZC5c2Gx2WE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:ad:c0:5a:4f:20:07:66:11:6a:70:19:2b:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Aug 4 12:00:49 2025 GMT
Not After : Aug 5 12:00:49 2025 GMT
Subject: CN=8e556a175d67edce908671cef9c45f6ac7fce36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:af:80:02:12:8a:0e:b9:40:0e:5c:96:fd:
95:22:12:52:bb:7a:a3:d0:87:d3:8a:fe:d2:05:af:
2c:3f:7f:6a:c7:64:26:e2:ca:51:b3:27:7d:e3:55:
33:12:98:c5:1e:0b:ef:bd:d8:b3:cc:ea:98:1c:e0:
44:33:69:da:85:80:2e:df:96:f4:21:58:ca:54:8d:
07:7c:37:6f:72:60:a8:69:a8:85:ce:51:b9:ab:e0:
fa:ec:fc:67:e5:88:fe:60:07:ee:14:f3:bf:98:3b:
bd:30:bb:fa:59:e5:66:d9:31:7b:89:c7:8b:79:4a:
64:ec:17:6a:ed:c4:97:67:60:70:0e:76:3c:f0:0a:
ff:ed:ac:df:c6:45:f1:1a:80:f2:a3:d7:9b:d0:67:
18:c8:3f:53:b0:b9:3d:a9:ea:16:05:86:1c:05:90:
f8:70:b9:bc:38:24:11:7b:ef:6c:f7:bf:8c:11:d8:
99:c1:a0:e9:7c:8a:04:df:15:e5:90:20:6b:b6:16:
b7:44:85:0d:d4:8c:12:55:e7:40:14:5b:54:08:37:
91:66:dd:40:0b:bc:7b:bd:72:5a:53:22:8b:d1:e6:
c2:c4:0e:bb:6f:d7:26:e4:ea:d6:83:31:dd:a2:8a:
e8:2f:36:de:b1:23:15:9e:2a:e7:41:fb:66:ae:f5:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:6A:17:5D:67:ED:CE:90:86:71:CE:F9:C4:5F:6A:C7:FC:E3:6E
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1f:d6:ed:9b:8c:ce:e9:95:c9:a5:22:09:5d:10:8d:34:86:
fc:d8:5a:a3:fb:51:ce:7b:8a:88:5e:c5:bf:7c:11:f2:cc:fa:
48:c9:06:8c:3f:c7:25:a7:db:7f:4f:d4:e6:d4:05:12:1d:26:
04:75:9b:d2:e6:cf:b9:75:6e:e5:a1:b7:8c:11:4a:ed:a0:f7:
02:b3:09:9c:e3:6d:d9:1b:f8:bd:42:f2:cd:c8:ad:dc:07:b7:
06:d9:43:b7:40:19:7c:a9:07:1c:de:45:f6:86:a5:75:eb:43:
c6:87:19:42:e4:76:3e:09:04:7b:70:76:f3:2b:70:17:6e:68:
ed:50:e4:40:bf:cc:28:bc:59:ed:cb:c9:c2:bc:97:49:ee:44:
c1:ab:21:32:c5:9d:01:ba:44:4b:5e:e5:ac:65:4e:34:3c:14:
db:49:41:20:fd:cf:c4:ab:b9:0f:5b:43:a2:a9:95:02:be:b8:
06:6c:de:ba:61:c1:f6:d6:b7:db:4a:94:05:96:3c:e1:2f:f5:
54:eb:53:f2:b9:b7:28:cb:a9:99:f3:52:bb:ea:d1:7d:24:a5:
8d:dc:14:a1:a0:7a:d6:08:70:07:25:a6:0f:fe:6d:5a:75:01:
d8:52:07:ed:1a:28:aa:58:9d:38:d6:88:f6:bc:5a:89:c6:c2:
4f:90:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:31 2025 by rpki-client