Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: SxTvdkWdy79yxK5YvHIjdYoO7lcusmEySjUQU7AMvVE=
Subject key identifier: EB:E0:14:3C:45:F9:2A:53:4C:85:A1:81:0A:5F:E6:A3:60:B6:FE:67
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0198868CE0275D715A222A71B2911E68A28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 22:00:35 +0000
Manifest this update: Thu 07 Aug 2025 22:00:35 +0000
Manifest next update: Fri 08 Aug 2025 22:00:35 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: DBJZ7BHfrSK8zP77+awByxPrWKvAZAD5O2Jqi7ZmZlY=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:e0:27:5d:71:5a:22:2a:71:b2:91:1e:68:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Aug 7 22:00:35 2025 GMT
Not After : Aug 8 22:00:35 2025 GMT
Subject: CN=ebe0143c45f92a534c85a1810a5fe6a360b6fe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:d8:f7:f9:28:78:89:cc:b5:48:ea:e7:1d:
aa:5f:fa:07:4f:0f:18:e1:60:86:75:21:02:64:bc:
b0:8e:c0:5e:30:06:f8:6d:61:dd:35:67:c3:c4:4d:
55:3c:6a:89:7d:cf:aa:45:9c:a2:67:7a:50:fe:d7:
26:62:79:2f:7a:6b:37:d4:b9:92:01:2f:79:c2:ab:
84:70:94:29:5e:d9:35:e2:3a:f0:3d:81:ad:b3:4c:
3e:4e:b5:fe:6f:e6:7d:3d:20:c1:df:d2:2a:4c:af:
2f:16:b8:52:69:94:8b:36:b6:99:5d:1d:8e:5d:28:
73:7e:f2:7c:03:0a:9f:c8:11:25:60:82:40:ff:b1:
de:e4:91:b0:08:fb:d8:23:08:20:36:f9:37:02:26:
aa:7f:7e:93:e1:51:15:1e:ee:aa:6b:34:6a:17:42:
4b:16:ee:ea:9e:66:b1:ef:1a:1f:e0:e6:8b:63:26:
1c:17:d5:98:8f:12:9e:26:89:b2:3d:f7:ac:a3:7c:
02:c9:34:ea:e5:a5:94:30:2b:f5:36:72:a7:ee:d1:
91:5f:75:b9:bd:c7:14:89:ac:0f:71:90:7d:e7:b7:
b3:9e:57:0d:20:ab:8b:8e:25:af:65:ba:c7:97:ab:
69:65:b4:86:d8:cb:e0:8d:77:8b:d1:26:7a:df:37:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:14:3C:45:F9:2A:53:4C:85:A1:81:0A:5F:E6:A3:60:B6:FE:67
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:9c:94:94:29:8b:73:fc:0d:92:52:a0:f7:13:61:d5:12:
07:b6:dc:a8:f1:22:03:ec:ea:e7:c0:8a:22:fa:81:42:05:8f:
3a:9b:e7:80:e9:f6:d4:ac:4d:08:7e:b4:52:95:86:49:f0:4f:
6f:7f:d4:57:12:38:b9:b1:9f:08:e8:b2:40:fc:12:ad:cf:4d:
e0:fc:03:b6:95:9b:37:08:d4:d0:6c:a0:38:15:9a:b1:6d:91:
31:06:3b:80:c0:e6:30:9b:d9:81:4e:32:51:53:6c:a3:81:8f:
db:37:5f:5a:19:d2:af:1d:76:b0:e6:07:71:67:5f:6a:24:23:
0c:5c:b6:a2:92:06:f2:74:f6:82:85:0f:5c:c9:0f:2e:a9:46:
d8:0a:dc:d3:f5:86:70:0d:ea:1c:8b:3b:17:66:f0:32:b0:8e:
b0:28:dc:61:ad:a8:fc:95:e0:3f:da:21:8d:89:89:f2:b8:98:
dd:b4:d5:eb:b3:6d:a0:38:2c:56:a1:c5:22:c8:33:99:b1:d0:
e2:b6:b9:9d:e6:f9:d9:e7:09:c8:af:2f:6e:10:cf:5d:c1:a2:
79:fc:dd:5b:e2:00:4b:67:5d:c7:c5:f0:86:e0:73:11:41:8d:
64:d4:18:8f:a2:b4:a6:39:47:29:cf:e7:7b:6d:bd:32:9f:b8:
a5:85:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:04:27 2025 by rpki-client