Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: 827Cmuk4FtPAts4EXkkRt4gCYqZCU9now53BeBZoWeI=
Subject key identifier: 3C:8B:B8:21:2B:BB:C6:D5:2F:73:D3:D7:0A:D1:3B:D2:DF:93:EC:70
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 01988D33E565F87F1CA8DD920C02B7378E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0D3E
Signing time: Sat 09 Aug 2025 05:00:45 +0000
Manifest this update: Sat 09 Aug 2025 05:00:45 +0000
Manifest next update: Sun 10 Aug 2025 05:00:45 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: ue2W6Hp6ckr1zX7oih0seXy2pzQgeX5aktecZM2lQF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:e5:65:f8:7f:1c:a8:dd:92:0c:02:b7:37:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Aug 9 05:00:45 2025 GMT
Not After : Aug 10 05:00:45 2025 GMT
Subject: CN=3c8bb8212bbbc6d52f73d3d70ad13bd2df93ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:b8:59:16:f3:b1:2a:f7:d7:bb:61:b4:d8:
fd:05:29:36:1e:96:c2:74:ba:74:11:b1:04:71:9f:
0c:17:a0:a3:56:0a:62:44:a8:a2:2e:b1:06:d1:29:
ce:25:e7:71:e2:4d:74:46:c6:b0:5d:9b:09:cc:ca:
40:36:a0:b6:80:43:33:89:e7:a5:ed:c2:6a:e0:5d:
28:b7:6b:7d:00:0c:fa:53:c3:7a:93:54:da:74:6b:
40:7d:23:2b:ef:62:52:06:f1:74:f9:93:5a:b7:20:
e4:8e:51:95:8d:d3:b4:e7:0a:0b:7a:40:a7:e4:4a:
c9:6d:c4:65:6f:17:e2:22:87:e8:0c:33:32:18:50:
f1:46:73:d7:d1:54:de:b9:ed:e2:0b:d1:0a:62:ad:
c6:8e:e2:ab:7e:b7:ac:e5:97:d4:60:11:9c:f6:8c:
55:16:4a:bc:1b:19:e8:d1:fc:1b:5b:31:a4:60:99:
b8:d8:85:d2:04:cb:4b:3f:c9:b4:6f:6c:41:22:1b:
ce:f6:0e:71:41:78:3e:0a:e3:e8:49:fe:88:78:d5:
3b:dc:49:94:5e:1f:af:4f:eb:10:7c:dc:b3:e5:2f:
a5:e5:98:7b:12:19:45:ca:68:88:6d:5c:cc:a5:9e:
64:02:8e:81:97:8b:a8:ab:d1:bd:76:a6:39:df:b0:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:B8:21:2B:BB:C6:D5:2F:73:D3:D7:0A:D1:3B:D2:DF:93:EC:70
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0c:65:0a:1a:e4:ad:5e:74:f8:99:dd:9a:c9:63:b4:70:e6:
e4:ec:bf:28:9d:ca:8c:6f:dc:88:af:f3:c7:dc:aa:43:b4:31:
dc:88:ac:0e:d7:77:e0:92:90:61:fd:02:09:58:4d:87:67:73:
87:12:35:74:f0:e4:29:2a:62:cf:d0:49:e5:b1:3a:18:e8:b6:
48:25:0f:77:03:35:ca:3d:9a:22:db:eb:9b:ca:7c:e3:c5:73:
84:20:48:88:9a:ee:55:68:8d:59:4f:85:9b:f1:c8:82:a0:54:
d8:8a:6e:2c:26:17:58:4c:52:f4:df:9c:e1:dd:5f:01:6b:fb:
50:4c:1a:56:0d:cd:0f:d9:51:8b:27:e1:cd:cb:2d:b2:84:ed:
97:d5:78:b2:48:62:5d:d4:da:38:01:4a:32:13:dd:55:6f:37:
f6:99:8b:63:00:2c:9f:e2:b7:e4:0a:c3:14:d0:7f:80:4d:0d:
6e:c6:52:56:6a:50:c4:3e:f5:b5:24:16:23:98:8f:42:b6:2a:
cc:ef:71:86:e2:75:56:94:a1:77:13:a2:be:a7:1f:42:cd:c8:
13:3d:34:bb:a3:15:98:f8:da:c8:e2:9c:97:4e:c8:42:41:7d:
25:f5:ca:f3:f9:00:8f:11:e3:3f:29:3e:4d:17:84:ba:46:c3:
26:91:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:23 2025 by rpki-client