Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File: 84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier: 4Y+v0RxJHKszRE5mtADgtxAJhYhytDiFsDchMpCyHAc=
Subject key identifier: 95:C6:48:54:47:0E:1D:1F:EC:E1:D9:2A:02:08:58:B1:08:B4:0F:3C
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0198966DA51EB5A2BE35EAA6026F3FCE7B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 00:00:24 +0000
Manifest this update: Mon 11 Aug 2025 00:00:24 +0000
Manifest next update: Tue 12 Aug 2025 00:00:24 +0000
Files and hashes: 1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: aJmpbZTgrFhxsbNaA9QOKFussXRGrsnIbSwJgoqYiXI=)
2: XZxf4Vieor4fQv4nMmlm0UTMEOA.roa (hash: 4QQC4VkFb6jqbwrgCdyeDgHr05+4Pfao8xbDnSrY77M=)
3: ozZE4V4pu8CXUMtiu4vEAUI5W90.roa (hash: p9IVNQ9TpNobGFhvkATSVt/+JVYF+c2vrdj6oFs4kB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:a5:1e:b5:a2:be:35:ea:a6:02:6f:3f:ce:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Aug 11 00:00:24 2025 GMT
Not After : Aug 12 00:00:24 2025 GMT
Subject: CN=95c64854470e1d1fece1d92a020858b108b40f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:ba:02:74:bd:37:84:a5:6a:e3:3b:b2:db:
0c:6d:f6:b5:d2:f5:fc:4b:37:a4:cd:5e:e7:f2:da:
f5:93:ee:fb:c8:54:86:93:49:f3:55:3e:aa:73:6a:
b2:92:ac:fb:b3:b5:a7:78:3b:0d:1d:3e:50:a7:03:
2e:c3:8f:87:4d:5c:a7:43:ed:0b:68:bf:7d:4d:f0:
eb:f0:ea:c4:e3:0b:fe:1f:b9:f8:bc:2e:90:c7:7a:
46:51:15:50:ef:bd:37:ea:ec:b7:0f:d0:f8:91:ba:
ae:8d:01:bb:a8:bd:b1:61:7e:63:d5:62:68:13:40:
5b:85:a5:96:70:28:89:80:f3:f6:5b:6e:fd:7d:50:
98:12:ec:a4:a5:c7:9c:31:0f:22:6f:a4:c0:f2:16:
2d:2d:46:3c:73:8c:7d:2d:95:93:aa:2d:43:da:67:
d3:6f:8e:35:be:c9:19:7a:a5:9f:44:a2:89:32:c5:
31:20:a0:a3:5e:1b:d5:2d:75:08:6a:0b:68:4a:8d:
08:39:b3:42:39:23:48:34:0e:c0:f2:3d:7c:c4:db:
8c:1d:83:12:2b:cb:64:bd:dd:6c:ec:4a:b0:d2:a9:
40:28:fe:57:9f:a0:d3:b0:7e:65:6e:66:3b:e1:c2:
4c:7e:9d:8f:f0:e6:f4:2d:b2:3c:70:43:c1:c7:f9:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:48:54:47:0E:1D:1F:EC:E1:D9:2A:02:08:58:B1:08:B4:0F:3C
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:60:64:00:f7:1a:f5:d7:f2:bd:14:71:db:92:c9:64:65:
42:e4:70:11:bf:65:fd:7c:f4:eb:ef:3e:17:3f:a5:a8:07:b3:
53:29:a7:3c:1e:d2:07:c4:dd:e6:49:27:8c:c3:e7:8b:ef:62:
d8:87:00:ef:85:2c:87:4a:00:62:19:73:b0:1e:c8:44:b1:62:
75:5a:9e:92:29:dd:8b:a3:94:11:fc:cb:c1:78:0d:69:b2:d3:
5f:5e:22:dd:47:91:0c:d8:1a:60:dd:e5:da:20:2e:f3:db:28:
96:43:c2:61:b5:ca:6e:a9:5c:c7:92:6e:99:aa:0d:97:7a:bb:
6d:1c:24:df:69:b5:31:a2:cf:55:35:3f:5a:7a:26:a0:90:4a:
f5:a2:0d:06:aa:a0:e8:95:86:40:20:a1:1b:9e:2b:4c:99:89:
4d:16:1d:5e:bc:83:aa:b1:7e:77:5c:cf:e3:6b:56:40:0b:85:
70:f4:c1:65:3d:50:52:08:8c:64:a0:ea:04:70:ac:9a:07:01:
f6:65:61:20:fb:84:88:bc:3a:df:b2:a9:a3:40:9c:a8:77:2b:
5f:b5:3f:17:c1:7d:d7:97:4f:f3:19:7a:18:14:04:79:32:4a:
53:6e:fb:68:88:b9:93:a8:9d:3f:b8:19:94:a6:94:88:28:dc:
f8:3b:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:31 2025 by rpki-client