Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: HmQxRqLop4MzjeyD6+XJ5nXbgAh5Ry7oeayZ8JOlDaQ=
Subject key identifier: 7E:BE:17:8A:64:A8:82:50:3B:22:4C:33:9D:AA:F3:F5:6F:9D:7B:7F
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0198A0842AD846A3039B7A93FD3DBD55B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 23:01:12 +0000
Manifest this update: Tue 12 Aug 2025 23:01:12 +0000
Manifest next update: Wed 13 Aug 2025 23:01:12 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: itqiMWesU99vzLzPG4qtImu6axS1e9WcLYC6MLN3Usg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:2a:d8:46:a3:03:9b:7a:93:fd:3d:bd:55:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Aug 12 23:01:12 2025 GMT
Not After : Aug 13 23:01:12 2025 GMT
Subject: CN=7ebe178a64a882503b224c339daaf3f56f9d7b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:8e:d2:67:84:fe:32:cd:1b:73:ed:0a:f2:
72:29:29:0b:d9:6a:2d:35:31:bd:3b:0d:4a:e7:fc:
21:b2:85:d8:01:07:81:1a:e0:7c:a4:9c:d8:0e:0f:
48:63:8b:b4:26:27:14:d4:58:96:7c:f2:03:b8:3d:
20:65:33:c8:eb:02:ea:f2:88:25:a6:7c:ee:3e:5e:
2d:c3:d1:3b:bf:04:59:60:d8:d1:ab:e7:64:bf:59:
a0:ba:a8:74:c3:a4:f0:52:31:54:f8:40:f6:d4:a1:
68:45:76:2d:5d:0a:00:27:a3:54:89:df:bc:d2:d3:
70:ec:94:5d:42:e7:98:e9:51:0e:73:07:8f:16:84:
d7:ba:16:4b:d5:72:1c:c1:4a:10:83:55:7c:85:06:
8e:ed:14:37:56:48:ac:6f:47:89:d8:7f:c3:10:09:
5a:eb:f9:94:08:99:58:dd:e4:d9:7b:ca:8b:94:93:
45:31:c1:68:71:6d:1b:bb:fc:b2:31:af:fe:45:25:
c0:92:98:83:4c:b8:71:84:e3:54:bb:c1:9e:c9:19:
2e:15:69:56:98:3d:f3:c2:99:07:da:7a:7a:c3:72:
25:52:f7:02:1b:ea:30:aa:60:37:dd:ff:e6:d0:12:
e6:61:1f:c3:e0:8a:9e:b8:6e:d5:c5:da:49:e4:92:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:17:8A:64:A8:82:50:3B:22:4C:33:9D:AA:F3:F5:6F:9D:7B:7F
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:6d:68:7f:ed:13:42:ad:db:bc:4e:f7:72:53:f5:95:b1:
c4:16:5c:ec:27:d7:b6:ef:93:45:bd:22:91:e0:c0:d7:f5:2f:
98:b9:02:e0:8b:bb:f2:e2:64:f0:ea:c1:e2:f6:36:3b:44:7c:
04:0d:c0:58:fa:68:3f:a1:fb:0e:bc:46:fb:20:75:17:8c:45:
e7:9d:52:e7:b8:3e:44:6e:b6:d2:08:cc:d6:6a:23:f3:34:82:
71:c8:d1:d9:76:6d:50:fa:97:78:b8:c9:b2:30:a9:8c:db:bc:
fc:bf:b0:67:0d:8b:ca:fd:5a:57:75:c8:54:80:59:08:b0:20:
50:86:da:a3:45:df:a8:b8:a9:21:54:21:6e:52:84:27:ff:ec:
4f:11:29:89:15:b7:d2:49:8e:21:1b:c0:63:8c:10:aa:d9:f0:
d0:ec:1b:2d:52:82:9e:5b:f4:49:b1:26:87:b4:18:e9:22:f1:
a5:63:1b:61:76:86:40:e9:c0:2c:1d:35:2e:54:5a:7d:87:c1:
c2:18:48:c5:3e:e4:09:b3:20:cd:de:12:1b:e5:e4:a2:f2:7b:
d6:67:5b:f7:42:cb:55:92:61:4a:36:6d:03:be:a7:3e:26:ad:
95:52:d5:4c:89:c5:9f:62:4d:c9:79:ac:00:4e:0c:13:11:1a:
d4:84:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:37 2025 by rpki-client