Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: V3Lyo/T087Zy4r2qdhUtWkRIf2JakNlSzlL3kdEQCck=
Subject key identifier: 3F:54:D2:11:05:1B:68:23:39:51:5C:76:98:97:1A:98:59:BB:1E:14
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019883FAA0C6470CA776DEEC95C255FAE8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0553
Signing time: Thu 07 Aug 2025 10:01:37 +0000
Manifest this update: Thu 07 Aug 2025 10:01:37 +0000
Manifest next update: Fri 08 Aug 2025 10:01:37 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: y00cTp2+wguE9EJVd4K4G4HpLMK2QS1/jKAMIfVRo7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:a0:c6:47:0c:a7:76:de:ec:95:c2:55:fa:e8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Aug 7 10:01:37 2025 GMT
Not After : Aug 8 10:01:37 2025 GMT
Subject: CN=3f54d211051b682339515c7698971a9859bb1e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:66:10:a4:69:1f:17:30:2e:3b:54:a3:ae:
7b:dc:67:94:46:85:9b:ce:fe:72:c2:2a:b5:23:71:
20:3f:0c:f6:17:00:1b:6f:0f:fd:e0:1c:8b:6f:8c:
f4:f7:ae:4e:f5:b3:0b:b5:fa:f5:e7:40:c8:67:75:
ca:42:19:c8:ab:d9:88:d5:5a:79:72:53:f3:4d:b4:
0f:2f:8c:53:91:6d:2d:c1:e4:40:e7:87:63:b8:e4:
8c:86:b3:4b:ba:b8:fe:18:28:05:b0:08:9a:d9:aa:
0e:93:e9:d2:06:77:83:49:62:bf:92:c4:89:72:d3:
d8:49:36:23:5b:77:fc:ff:0e:19:50:2f:3e:bf:55:
0d:ad:49:78:10:41:a7:00:58:cd:33:59:0d:2b:09:
ea:2d:7a:06:4a:a5:c9:bc:fc:2a:17:89:cf:12:66:
4a:e4:4c:13:a5:eb:bc:2b:47:ab:6a:ab:bf:ea:73:
7d:1a:e0:46:f5:7b:f3:d0:1f:d8:84:04:99:a7:63:
ae:dc:19:ed:73:5c:4e:10:19:4d:ab:40:d2:87:58:
79:ae:75:16:fd:44:3b:5d:ff:49:bc:34:42:e1:ac:
a9:c0:51:e8:3f:2a:a0:52:bb:9f:dd:5d:f0:4f:87:
ad:c5:a1:52:d1:13:b7:4c:e9:ec:ea:23:d8:11:c3:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:D2:11:05:1B:68:23:39:51:5C:76:98:97:1A:98:59:BB:1E:14
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9c:bd:42:16:3b:71:51:b1:06:38:9e:ad:db:e0:55:c1:ea:
51:54:b3:51:b7:6d:bd:55:e9:10:87:25:32:f6:0f:16:0c:39:
b6:f9:d3:55:8f:1c:1d:68:04:b6:ec:3f:bc:74:50:06:89:7c:
66:75:a3:8d:f9:8d:a6:95:c9:d5:46:74:b8:90:87:30:9d:26:
07:da:5a:df:13:4b:52:98:ea:ad:b3:45:ca:03:c6:6a:11:fb:
57:1e:5b:e8:9e:56:29:c5:ee:8b:8e:07:26:31:57:b7:e8:33:
a8:99:4d:57:c9:c8:a9:6b:aa:57:79:f2:d6:3c:e8:50:b4:f9:
1a:5b:fb:ea:fe:c0:79:47:15:50:a6:44:de:57:d2:96:cc:f1:
1a:18:6b:2e:64:44:ae:2e:6a:d4:b1:fd:51:26:39:4b:20:88:
2e:2b:04:00:61:61:c1:98:fb:51:27:99:2a:05:82:70:64:18:
9c:12:21:69:20:a9:54:e1:a9:aa:c9:07:19:cf:94:69:67:ec:
90:3a:e0:29:a3:95:51:6c:1d:1b:8c:29:a6:ab:10:b7:18:d2:
4e:5b:97:da:d8:05:df:1e:94:7f:1e:aa:fe:04:a3:5d:93:d8:
9e:77:16:ec:30:de:d4:01:96:7c:be:b2:87:76:af:d0:e5:1a:
78:6f:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:55 2025 by rpki-client