Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: epR7INDhq2MnfLulXXK4C7wZSbfPYaIU35zlYE5T+Ls=
Subject key identifier: E8:78:F8:78:CA:C5:D1:55:A5:73:A1:65:AB:7D:C4:BB:9A:CD:37:14
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 0198733D09CF40E39F53352F633CB1A179C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 045D
Signing time: Mon 04 Aug 2025 04:00:36 +0000
Manifest this update: Mon 04 Aug 2025 04:00:36 +0000
Manifest next update: Tue 05 Aug 2025 04:00:36 +0000
Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: Lf923ZJyxXVkn2/PqE5g17zCDKsw6wn8aUEdg+WjSW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:09:cf:40:e3:9f:53:35:2f:63:3c:b1:a1:79:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Aug 4 04:00:36 2025 GMT
Not After : Aug 5 04:00:36 2025 GMT
Subject: CN=e878f878cac5d155a573a165ab7dc4bb9acd3714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:09:04:ac:e7:d6:34:52:44:21:0a:c7:00:
1e:25:a9:aa:75:bb:1d:dc:8f:87:62:50:ac:12:4f:
79:b5:53:1e:90:b0:e3:ba:83:59:9f:00:20:8c:1b:
26:9e:eb:55:7c:30:f2:a8:cc:2c:2f:8e:2b:2d:c5:
7c:62:b5:9b:fa:19:60:ec:71:4b:f0:a5:fc:48:15:
40:69:a8:34:ea:28:6d:90:fe:c1:da:0a:98:da:5c:
a4:7e:d2:1d:d0:ed:75:70:e4:9b:b7:21:81:05:b0:
cd:ce:23:81:73:e2:ea:b6:4b:06:2b:6f:1b:86:7e:
ea:3c:9f:bc:cc:b0:ff:fe:8c:db:93:49:e1:cd:79:
4e:71:c9:5f:2b:88:2d:8c:13:77:07:a8:ad:2d:e7:
79:55:16:90:3c:31:64:73:ef:0a:62:7d:b9:54:02:
82:4b:37:0b:89:6f:7a:b7:a7:c5:43:d4:11:50:91:
b6:f0:23:98:8a:f9:52:6b:bc:4a:2b:85:39:75:0a:
77:c1:5a:13:1c:16:eb:a3:85:f4:d6:e7:7c:d4:82:
04:8e:34:94:d1:24:19:ca:6b:e2:d4:93:09:37:17:
e0:4b:df:55:e8:d6:8a:74:02:67:01:08:43:38:2a:
8a:0e:d8:98:ad:5d:1a:68:56:9b:e6:93:a4:20:70:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:78:F8:78:CA:C5:D1:55:A5:73:A1:65:AB:7D:C4:BB:9A:CD:37:14
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:3e:db:3e:63:43:26:15:e7:c1:77:60:50:ce:7e:9a:a2:
e6:1b:86:22:2e:49:91:6e:5e:ee:95:a9:d6:4e:14:1f:b6:92:
f1:86:3e:72:e7:74:b8:77:80:2e:24:ea:03:db:c3:bd:f6:51:
9c:66:ec:ee:be:78:af:bb:0b:97:12:67:a8:dc:43:b5:fb:24:
52:a9:62:2c:10:91:02:75:85:15:e9:69:e6:2d:31:f5:d5:2f:
38:b2:96:4d:c1:f9:2d:3d:12:9b:73:c4:0a:7e:02:63:65:6a:
0a:11:de:af:6c:03:df:89:04:19:09:20:79:1f:9e:8b:0a:94:
d8:5a:4e:74:cb:3d:4d:93:51:17:72:55:72:43:6a:79:c1:87:
97:c1:23:e8:ee:d7:15:b3:96:f3:7f:e7:d3:4f:a2:ec:87:e3:
a9:31:59:e4:88:89:11:0c:40:17:62:a7:c0:5a:d7:5e:ee:1b:
07:59:39:fb:58:e7:a5:4c:7e:7a:5a:47:b1:2c:f2:61:87:dc:
67:72:78:fe:53:99:68:11:e9:7b:89:2c:57:e0:ba:5d:44:30:
41:85:be:2f:82:4d:a8:b0:cd:d9:24:3a:42:49:8e:46:6f:f6:
68:7c:fc:c0:49:ec:0a:f6:89:bc:4c:d3:ae:b9:e3:88:ae:19:
4d:4e:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:13 2025 by rpki-client