Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: F2sloN7Y+5lnKarDDkJTy1yFYsy8YaXLAUfpVSAXQ/E=
Subject key identifier: 24:21:89:D5:16:E2:1B:90:46:CF:24:DC:08:32:05:63:2D:DB:01:C0
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 01988E47319B32111E57F1E2F0A7F01A809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 046F
Signing time: Sat 09 Aug 2025 10:01:27 +0000
Manifest this update: Sat 09 Aug 2025 10:01:27 +0000
Manifest next update: Sun 10 Aug 2025 10:01:27 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: QhSsPYF9g63ge3yFqxnXKaRN1+yvH56oXfSmVoOJfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:31:9b:32:11:1e:57:f1:e2:f0:a7:f0:1a:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Aug 9 10:01:27 2025 GMT
Not After : Aug 10 10:01:27 2025 GMT
Subject: CN=242189d516e21b9046cf24dc083205632ddb01c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:fc:2b:54:c9:d8:f8:82:4e:76:ce:ee:a5:
49:2a:e3:c3:1d:15:85:75:c8:8c:d9:ea:3e:c9:dc:
e1:c6:76:2e:27:e9:9e:d0:b2:21:74:47:ff:d2:bd:
a1:8f:b8:55:1a:15:cc:55:c6:47:71:51:43:bb:f0:
e0:fa:b2:1c:a9:92:24:9e:f9:11:8e:92:0d:5a:97:
fb:e2:19:f2:16:0d:93:8f:b1:c3:d6:fb:1a:14:b5:
fd:48:94:14:1c:10:51:cf:a1:c8:9c:ff:a0:0a:a3:
ce:81:65:2d:dd:44:7a:56:1c:15:38:bf:c7:01:4d:
10:3c:8f:bf:91:ec:63:7b:21:53:69:ed:f1:15:ff:
aa:44:ab:a7:39:3a:24:19:50:c1:ac:8f:f0:60:b4:
6d:88:23:b5:5e:b7:67:9a:23:7a:2f:ca:0e:9d:f3:
1e:f4:7f:19:5a:6c:a8:74:67:88:68:94:96:69:ee:
3f:cc:2b:29:b4:35:4c:cc:48:14:d3:4f:7d:3e:62:
25:e7:b4:f2:fc:64:ff:c7:5b:e2:d1:b9:35:7a:ae:
bc:8c:46:06:86:95:fb:32:8b:dc:19:8d:52:70:45:
e5:6f:f9:66:69:aa:df:48:fe:77:a2:8f:18:9e:48:
28:8f:07:44:13:f8:a7:3a:0a:2d:35:d2:c0:78:28:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:89:D5:16:E2:1B:90:46:CF:24:DC:08:32:05:63:2D:DB:01:C0
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e1:ec:a5:a8:1c:1f:10:c7:19:ba:5f:5f:21:d9:90:9e:d8:
56:8f:73:0f:2c:e6:92:e5:f8:1a:a4:ab:8e:0b:e0:b8:5e:87:
fd:c8:c6:5d:10:28:02:70:5f:cf:c5:d5:fc:76:6d:bb:7e:90:
e6:d0:0d:89:7e:bd:d4:3a:e7:07:30:68:5b:b3:49:c5:6a:84:
d1:11:c7:3a:f0:9d:4b:a4:63:21:ad:c5:57:1b:c6:56:4a:b7:
97:d4:54:aa:1e:91:ec:49:12:29:8f:22:11:9b:21:86:d7:9a:
96:91:ea:71:80:82:a2:3b:0f:db:74:6a:f7:a8:21:19:59:3f:
5c:2f:9f:c2:ea:75:24:05:77:21:29:26:91:54:28:fc:bf:89:
9e:7d:5e:e4:67:2f:e9:b8:eb:16:30:c5:83:53:f2:07:07:2d:
59:f2:05:b5:6a:b3:02:6c:fd:33:8f:ab:8b:77:a3:f6:7a:9b:
1e:7c:b7:30:c3:35:17:78:42:72:11:4b:c9:cf:2d:60:62:33:
50:b3:66:25:a9:34:57:c9:0c:a4:36:c1:65:d6:9f:e5:88:79:
f8:1a:26:e3:a1:6e:b9:ee:df:9c:f8:8f:a2:9e:32:5b:58:be:
b9:14:f4:77:5c:57:54:bc:43:15:ed:3e:94:85:83:9e:cf:64:
ef:c2:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:32 2025 by rpki-client