Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: xMS77EhDSN4lepecIVvPmAvECHGuUfN8U9HhYE5jg/Q=
Subject key identifier: 6B:C9:80:A7:30:58:E7:DC:24:65:F8:8D:CB:1C:4C:05:19:0F:6F:36
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019880C228C6214602F3CBF259A116948B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 19:01:04 +0000
Manifest this update: Wed 06 Aug 2025 19:01:04 +0000
Manifest next update: Thu 07 Aug 2025 19:01:04 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: rOLe+5CUH+8RHMopVE885lE4eVWc9p92fWWPnuVy2Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:28:c6:21:46:02:f3:cb:f2:59:a1:16:94:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Aug 6 19:01:04 2025 GMT
Not After : Aug 7 19:01:04 2025 GMT
Subject: CN=6bc980a73058e7dc2465f88dcb1c4c05190f6f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:77:57:f5:ca:de:55:86:ae:b6:15:4d:39:
08:49:8b:3e:96:6f:49:71:5d:b1:13:2c:f2:55:8a:
67:9a:ee:5b:f1:de:28:03:67:5c:56:30:d5:28:91:
c5:39:16:08:b4:2d:00:44:5e:5c:0a:4c:48:16:03:
e8:67:61:68:a2:98:97:d4:ce:17:73:62:9e:90:44:
0f:ce:51:09:86:d7:1a:8c:e6:08:3c:57:80:79:0b:
4b:c6:51:0e:37:db:5a:c7:c6:92:d9:f0:d9:c5:7a:
3e:44:95:aa:de:42:0d:1a:c1:39:15:a5:62:7a:a0:
a2:ae:f3:68:5a:98:b0:c1:ec:f0:d6:1b:41:80:2c:
77:22:4c:47:19:2e:76:98:0a:c1:3e:61:5b:72:e3:
b7:f0:5a:12:b3:30:fa:3e:9b:d8:5c:6f:c6:7e:a3:
57:b4:f9:3a:f4:38:14:be:7b:84:64:64:7b:c3:7e:
f4:da:c4:93:86:12:8a:2b:9e:49:41:91:bb:75:13:
30:90:d3:ee:df:e8:1c:66:53:6a:79:01:51:59:d0:
56:c3:3b:62:97:3b:9b:e1:81:d0:e0:4b:70:48:be:
05:83:2f:ca:fd:63:27:1d:22:3e:14:ed:d6:b0:87:
5c:2f:5a:33:c3:c7:3a:51:56:41:ea:b3:2c:df:6d:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:80:A7:30:58:E7:DC:24:65:F8:8D:CB:1C:4C:05:19:0F:6F:36
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:29:09:8f:98:e4:f5:05:ff:05:e2:f4:78:4d:5c:4f:c7:95:
1d:8d:6c:ee:6e:86:79:07:0e:e7:7a:60:8e:0f:e9:5f:23:46:
26:3c:81:1b:ba:fb:5a:38:e3:4f:fd:77:a0:0b:1d:76:c0:cf:
c0:e7:29:6e:0c:b6:05:86:69:9a:4d:c8:a7:71:09:02:2d:5a:
34:40:63:28:ec:b4:40:2a:3c:cd:34:b8:ff:41:f4:a9:35:b2:
bd:cd:51:2b:ca:f4:fd:23:89:a3:e4:9a:a2:93:18:9e:e3:1b:
70:30:c7:20:f2:9e:80:86:70:c7:af:5d:a6:f0:70:03:a7:ec:
3f:9b:79:51:ea:04:4c:9d:2b:75:c3:e3:cb:1e:ed:85:9b:a1:
e0:0a:1e:f4:8e:9e:74:75:1a:e6:6a:3e:f8:b1:90:f9:81:42:
70:c9:45:83:87:f1:32:80:37:e1:1e:eb:23:c8:0e:06:29:af:
05:1b:55:c0:9d:28:c2:a4:17:9b:25:b1:df:ab:9a:f0:22:84:
9b:f0:ec:14:6d:46:18:78:45:ca:44:e2:d8:04:5a:e3:70:4b:
8d:93:07:88:75:9e:6e:db:49:b1:bb:dc:1d:fe:93:40:43:4c:
27:01:c0:cc:32:67:49:45:4c:98:e2:71:a3:6f:18:68:0d:9b:
27:b7:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:50 2025 by rpki-client