
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: GTI8Migfv5Gqc6Gmuiyf5VCPMELw3tENvS5lmURv1SA=
Subject key identifier: 7E:DA:26:A7:87:24:BC:CD:53:BC:C4:29:27:D2:27:81:3F:CE:26:0C
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 01988B7C6F0C52C0CE4478F0AD96B7A368AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:00:44 +0000
Manifest this update: Fri 08 Aug 2025 21:00:44 +0000
Manifest next update: Sat 09 Aug 2025 21:00:44 +0000
Files and hashes: 1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: 6NF25P8kA0PJDMUWY+ZiEQfQO+8/gPLmcs0bgfImuSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:6f:0c:52:c0:ce:44:78:f0:ad:96:b7:a3:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Aug 8 21:00:44 2025 GMT
Not After : Aug 9 21:00:44 2025 GMT
Subject: CN=7eda26a78724bccd53bcc42927d227813fce260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:33:f8:3a:e7:ed:98:32:98:d5:7f:46:6c:
93:45:28:21:e1:84:aa:ff:aa:6a:d4:bb:7d:4b:e4:
44:63:a4:12:85:be:7f:fc:25:bb:c2:38:c2:31:f2:
46:df:b0:5f:1d:17:cc:8d:2a:c1:27:2b:e4:5c:55:
38:36:9f:c8:0b:90:89:dc:46:f4:8c:ac:49:b8:d0:
19:39:78:90:38:c0:27:9e:d3:2f:90:4c:14:94:fb:
cc:1a:0e:6a:6f:00:c3:1d:44:25:5a:b3:1f:bc:74:
9e:66:6e:57:8a:1d:88:1e:84:2b:cd:6f:b5:e3:c1:
66:12:f0:7c:61:7a:9b:0e:2e:93:d0:0b:e2:b1:f6:
cc:ac:3e:e4:f6:b3:88:2e:7e:cf:ce:66:af:d7:ba:
08:14:8d:7d:80:5a:9f:ab:c7:25:83:2e:ad:d4:a1:
49:9b:e1:14:79:ac:14:6d:db:f7:9e:0b:9e:a5:b1:
86:4f:51:52:83:8f:b1:d9:bd:45:69:08:7f:a9:8d:
3e:19:32:c4:27:ef:fc:f0:24:81:d0:cd:6f:6e:8e:
92:e5:7f:99:68:8f:88:87:78:6d:78:9c:5a:c3:e3:
e8:a9:a9:71:9f:f2:48:f5:bc:f8:49:18:f2:c6:0f:
59:da:43:71:21:e3:08:c9:5b:7c:63:d7:4a:33:79:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DA:26:A7:87:24:BC:CD:53:BC:C4:29:27:D2:27:81:3F:CE:26:0C
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:19:3f:0b:ac:99:0b:96:59:77:b2:a4:95:e3:c5:0f:23:
63:9c:b6:17:22:5f:10:c4:05:5d:71:53:61:48:bd:db:5c:9e:
e7:a3:a2:bd:4c:c5:1f:fc:f0:a9:b5:cf:b3:99:1e:2b:a5:60:
68:7c:44:ea:1e:07:3e:f5:a2:06:58:87:7a:8f:d3:8b:67:92:
4f:d1:b3:8a:e8:21:e9:49:b1:70:3e:bb:d1:6a:9d:d4:dc:24:
e5:3f:9d:db:4d:26:80:0b:b8:8c:4d:59:3d:79:01:d3:76:9e:
87:de:54:19:cd:6c:4d:3b:b2:f4:e4:73:bb:45:69:4b:b2:22:
57:78:9c:90:7b:65:af:02:d2:01:fa:3a:7a:d9:2f:6d:00:c0:
a3:12:f1:c7:d1:1f:6a:72:c6:ab:8b:1f:5a:d9:f9:f1:32:bb:
8d:44:b8:2a:cd:5e:a9:a7:b4:d1:10:85:fb:cb:90:aa:73:36:
8d:fc:21:b2:1a:b3:dd:8e:27:7a:4d:3b:61:94:8f:29:e6:b1:
02:f7:14:1c:ff:ab:9b:bc:78:19:3b:65:b0:45:5c:b5:6d:56:
3a:dd:cf:42:c1:6f:54:6c:f8:b5:1f:a9:13:88:00:cd:20:41:
b0:07:b5:9c:40:e7:8b:21:49:87:11:9f:6d:86:ca:23:df:ca:
d2:19:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:09 2025 by rpki-client