Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: nIdJ9OOYzM8xqh56QSXG6WynABBsoB2b8+q67AF7+CM=
Subject key identifier: 76:10:F7:EF:B3:26:84:EC:89:0C:13:50:39:28:49:9B:AB:09:83:42
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019873E2E1716DCD44BF1F1C5CB431279080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: 4PZQlcsjVsAvgmqOqQEmrDwbHdM.roa (hash: WiP23BGsK1UTNte+BakYOV/1LeI5VSUhcks2u5DxJ8M=)
2: Ha5upAoCmCkgHpv_bzidQHciZpU.roa (hash: dLaRJkdtGcshL2ZliATq/iRbMaN6GbsblgbG4F90nyk=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: 4cpuMgRX7d6SP6dZcdf+iF2kvt3SnMIzFN68yXu9+5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e1:71:6d:cd:44:bf:1f:1c:5c:b4:31:27:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=7610f7efb32684ec890c13503928499bab098342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:52:16:b4:c3:85:6b:ff:79:32:b7:b9:a1:
37:47:c4:bc:36:1d:3d:af:31:57:c3:7d:81:fd:c9:
8d:bb:4c:28:05:38:eb:3f:d6:1e:db:e8:cf:d7:ce:
c7:d4:f3:73:94:2c:5f:cc:4d:aa:f8:2b:93:e8:10:
d9:b6:ec:f9:17:b3:28:ae:b4:91:44:1a:b0:d5:9b:
84:8b:5b:8e:e6:25:94:94:01:d3:97:e9:1e:11:ab:
f2:9f:6a:b7:39:47:e3:57:dd:9f:c0:c3:b0:38:8e:
41:e4:68:53:ac:0f:f5:1a:ef:01:0a:e8:9e:50:39:
d7:d7:7b:ee:b8:c8:90:51:7e:b8:f3:6b:0b:fd:16:
84:e2:78:93:7d:72:31:f9:71:c3:96:f6:43:93:47:
70:16:d2:b2:22:26:ad:5c:54:39:cc:eb:5d:0d:7d:
30:e6:b0:8f:d7:e8:5e:b6:90:59:a2:a9:7d:bb:77:
f5:13:2a:18:08:61:3b:0c:3c:2c:c6:57:d9:14:35:
79:d7:94:75:c3:eb:60:bb:73:89:31:dc:4c:bc:c3:
ae:fe:8f:94:fc:ac:39:d2:9a:6a:9d:8b:27:2b:0f:
76:ef:b9:47:a5:b6:3e:49:3f:3d:94:56:15:99:4e:
cd:f7:99:5e:59:8c:7c:02:a9:c4:73:07:d5:f2:57:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:F7:EF:B3:26:84:EC:89:0C:13:50:39:28:49:9B:AB:09:83:42
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:db:fb:9a:9f:e8:b0:d2:c7:c8:0a:12:58:71:06:03:16:bb:
ca:05:77:6a:e8:99:26:30:fc:5f:ab:a4:3e:a5:e7:bb:10:e8:
3c:8a:e8:86:9e:98:64:ed:e7:a2:a3:82:a2:04:65:23:d8:e7:
c3:4a:a5:f6:8e:d1:bd:ec:c2:9a:30:96:7a:e4:2f:ff:0f:9a:
5c:7c:97:f2:a5:e1:57:2a:a0:aa:4c:6c:3b:f8:ab:54:8c:55:
57:a2:d6:f3:95:e6:3c:2c:a9:bd:4b:3a:78:54:d3:fd:3e:6c:
d1:84:f5:76:2c:1f:11:e9:d2:cf:4c:ec:90:6e:8a:34:f9:6f:
15:f5:e7:ad:a4:99:61:e2:72:7c:02:e5:72:a5:c4:ac:5f:60:
1e:cc:6d:ef:17:ff:3d:b9:61:1d:4f:2e:25:79:b6:23:61:30:
62:65:b1:9f:1e:01:2d:9a:20:67:a2:d7:07:67:b7:4e:f4:c8:
4f:9c:32:9d:47:35:d9:93:60:2c:c0:da:c9:e5:f4:58:88:16:
5f:13:52:34:32:cc:38:6c:bf:69:79:be:b5:8b:86:43:2f:41:
65:8d:de:ef:d3:49:33:e6:84:3e:f1:48:e2:b9:4e:86:00:28:
93:aa:1b:82:98:13:4a:dd:a9:00:2c:be:a5:4f:4a:87:bc:87:
29:f9:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:59 2025 by rpki-client