Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: TYFEB/vXGQ51HdR/vwEGF3nA6BUyyl/zxSgioz0g5ms=
Subject key identifier: 0D:79:9C:79:5F:FE:B3:2E:53:5C:C2:D3:C8:57:FA:A4:DF:DD:1A:25
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019894B805A6B5E1ADDEDEAB6EADED1C7167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 129E
Signing time: Sun 10 Aug 2025 16:02:24 +0000
Manifest this update: Sun 10 Aug 2025 16:02:24 +0000
Manifest next update: Mon 11 Aug 2025 16:02:24 +0000
Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=)
2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: vtKP6F9toubxIXgcgnENh/pHVrjh4YYPtDMaco824dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:05:a6:b5:e1:ad:de:de:ab:6e:ad:ed:1c:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Aug 10 16:02:24 2025 GMT
Not After : Aug 11 16:02:24 2025 GMT
Subject: CN=0d799c795ffeb32e535cc2d3c857faa4dfdd1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:88:84:0a:75:86:fd:0c:a5:6c:7c:6c:0a:
be:f8:75:fc:f2:01:7f:b2:aa:f5:c8:dd:69:59:97:
e2:95:7d:cf:13:10:c5:c4:03:f4:a9:69:88:73:fa:
47:cc:b0:6e:f1:37:fc:26:5a:32:7e:d2:a7:84:4d:
c8:40:57:d3:a0:47:ee:87:65:79:29:cc:ed:30:26:
89:3c:58:b1:da:73:ba:45:6f:9d:01:27:a7:2d:01:
17:32:20:7c:b4:71:0f:8e:d2:50:a5:9e:97:f4:2a:
20:97:2f:e6:39:28:d2:d6:e4:8b:e2:a7:74:df:50:
48:e7:62:a6:9e:cb:5e:02:58:65:01:c9:20:96:dd:
67:96:df:49:ae:5e:cb:18:88:4b:cb:4a:5b:86:42:
a8:32:e1:ea:8a:b7:6c:9c:b4:42:f9:63:f6:10:e3:
7e:1d:e1:76:f4:a6:15:3c:b3:c3:72:7d:29:35:85:
19:15:5f:52:b5:75:a4:30:6b:b7:d3:ad:6d:43:0e:
03:e3:f9:18:83:a4:aa:a8:e3:7a:e2:4a:1b:3e:90:
84:f1:c0:de:64:38:c0:df:18:95:f3:4b:34:9e:d2:
d6:0e:e7:3d:89:ee:55:4f:df:94:e0:f5:95:a2:9b:
c7:66:34:c1:96:c4:a4:df:78:d3:ab:5d:91:96:6e:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:9C:79:5F:FE:B3:2E:53:5C:C2:D3:C8:57:FA:A4:DF:DD:1A:25
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:bc:c9:85:7c:d7:68:dd:70:36:33:f1:96:d6:8d:61:39:
92:ce:c0:89:13:ee:66:7c:0c:1e:4a:a7:6d:3a:b2:8c:b5:3f:
f8:b1:ac:5a:a0:77:c0:bc:f8:57:00:20:a7:be:c0:b1:02:47:
db:54:91:48:ce:ab:31:8b:b5:ef:56:23:58:38:de:92:33:49:
ce:6c:f7:50:75:1d:9d:96:2d:57:74:27:8b:7b:da:cb:b0:9f:
01:be:ce:58:2a:00:3c:30:01:51:89:ed:d4:19:68:0f:2b:70:
ff:f5:db:dd:bf:67:2d:f0:e1:f3:4f:6b:7c:9b:8d:ac:64:06:
7d:d7:ac:e0:72:90:4a:0c:f4:f0:f1:e3:64:75:59:9d:03:3f:
84:2b:a5:65:26:01:51:5e:31:a5:c5:dd:0b:f7:f3:28:97:a7:
a0:e6:55:f8:fe:cf:64:ad:ca:63:14:4a:e8:13:b3:9c:18:54:
34:42:ca:1c:85:7e:3b:9d:bc:e2:8b:80:7b:8b:f1:af:51:e1:
bb:e3:f2:2a:dd:f2:7d:1e:99:2c:8f:27:a7:b3:5e:8e:3e:ee:
ee:9b:05:a2:15:f8:12:f8:95:e8:ae:b6:66:ad:4e:f2:69:e1:
b7:74:e7:07:12:1f:df:5c:dd:cb:8c:2e:c8:c2:d9:06:4c:61:
7c:c8:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:49 2025 by rpki-client