Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: gSBF9W3VvmbSqw6taSJ/+7nsBdNx2TfqJyg8pb7OEGo=
Subject key identifier: 58:CA:E4:BE:2C:5C:B4:3D:FF:16:00:14:2F:32:C2:C1:62:F0:24:2E
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019879AE3A5D767AFC2837CE334BC5AF355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 03F6
Signing time: Tue 05 Aug 2025 10:01:57 +0000
Manifest this update: Tue 05 Aug 2025 10:01:57 +0000
Manifest next update: Wed 06 Aug 2025 10:01:57 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: IHItf2PiByiu/qD2kJlYMDRV9MWP1SpwL9PzV71BXf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:3a:5d:76:7a:fc:28:37:ce:33:4b:c5:af:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Aug 5 10:01:57 2025 GMT
Not After : Aug 6 10:01:57 2025 GMT
Subject: CN=58cae4be2c5cb43dff1600142f32c2c162f0242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:53:35:b7:60:03:21:78:a8:3f:65:3d:c0:
7c:02:4c:f6:5a:5d:9c:a8:c3:fc:9e:c8:72:54:22:
bb:1c:54:02:3e:c1:36:eb:58:11:09:56:1d:38:4a:
98:38:65:69:7e:9b:7f:72:f6:ba:ba:6d:5c:da:73:
91:39:57:ad:42:12:79:02:19:56:ec:09:76:ce:cf:
de:77:5f:3c:4e:52:f6:ac:8c:6c:59:d5:33:98:84:
cf:2d:f3:51:f0:74:54:65:14:09:f4:8e:af:39:ee:
ae:80:e9:e1:a8:88:f3:4f:0e:bd:d2:f7:dd:d5:9d:
68:cb:7e:8c:f2:d8:ca:d1:07:88:d5:2a:00:b9:e2:
60:dd:4e:c3:f7:3d:6a:d0:88:2c:44:51:f2:7d:12:
07:0c:af:98:c8:64:bc:7b:e8:90:ac:01:f3:c7:ee:
7c:f7:e1:0a:a1:1c:15:49:79:b0:c7:4b:f8:c0:51:
78:a2:c7:f8:43:02:9a:03:48:94:b9:cf:7b:ab:a8:
dd:58:89:31:17:18:ce:e7:dc:30:24:4e:7a:ff:71:
7a:62:70:ae:15:37:bf:fa:e2:2b:28:6e:b4:49:4e:
c0:0b:55:83:a0:01:df:1b:19:4b:20:06:26:93:dc:
a7:f4:5e:7d:c0:c4:72:a1:ba:8a:13:95:f7:e7:83:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:E4:BE:2C:5C:B4:3D:FF:16:00:14:2F:32:C2:C1:62:F0:24:2E
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2b:d5:94:e0:62:04:28:f3:c3:df:df:bb:7f:5c:bc:aa:66:
7f:53:82:30:e8:c7:e5:98:d6:3f:e9:b8:23:51:68:62:fd:21:
d0:83:38:70:9a:e1:c7:36:8f:3d:9a:5c:86:32:61:0d:f7:9a:
4f:ac:67:d5:f3:c4:ca:a5:aa:83:11:8f:38:fa:f4:70:3f:69:
00:5f:5e:96:c8:4a:85:ca:3f:77:a5:a0:ab:1b:62:da:9f:59:
02:11:37:5c:75:b4:66:35:13:da:12:a1:25:ab:ab:d5:51:38:
22:02:02:c2:de:1a:8b:e7:1c:f2:bb:7c:ef:48:ad:68:6e:bb:
de:ab:c3:dd:1a:4f:36:f9:a4:45:15:e3:d6:e7:f8:95:88:29:
f5:b6:9b:87:46:20:25:29:9a:ca:f5:4e:6e:e7:fd:69:5c:f3:
a3:9e:f5:b9:75:5e:91:12:79:57:f0:36:d8:d4:0c:15:44:7f:
98:53:3f:01:fa:7e:cd:47:f4:bf:6a:1a:57:b7:0e:ed:ec:b6:
91:2f:49:b5:3f:7a:77:9b:7d:18:22:21:d5:b9:6b:7d:43:1f:
29:b0:58:c4:95:db:15:ed:4e:91:43:4c:94:59:9c:dc:f9:7d:
ff:75:9b:82:fb:17:ff:ce:13:8c:ac:9a:ed:96:8e:f8:de:2c:
f8:bf:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:01 2025 by rpki-client