Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: xEAWEiQl+Sj+VkzixXLCGwSU5H9JzlT5Ks31zqtEqnk=
Subject key identifier: 9A:99:C3:49:16:05:EB:1C:D9:89:57:47:51:5F:C7:55:00:EB:D6:58
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 01988DD8B7BCD5E32BE4F40DB38D8B4E0A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 08:00:46 +0000
Manifest this update: Sat 09 Aug 2025 08:00:46 +0000
Manifest next update: Sun 10 Aug 2025 08:00:46 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: YuHP4QMnvQh7LZE5+3wEMTiKuSzi92DuHsVezGGPWxE=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:b7:bc:d5:e3:2b:e4:f4:0d:b3:8d:8b:4e:0a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Aug 9 08:00:46 2025 GMT
Not After : Aug 10 08:00:46 2025 GMT
Subject: CN=9a99c3491605eb1cd9895747515fc75500ebd658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:4c:d6:2b:ef:4f:0a:43:39:9a:68:67:f9:
56:71:0e:a7:b8:58:d6:a5:d5:fb:f0:ff:8b:24:1d:
89:36:32:a7:a4:11:9f:bd:a5:c8:c8:27:28:bb:b7:
7b:b0:65:bb:22:23:fe:e0:4c:01:c4:1c:0b:bf:f5:
44:ac:2e:29:c6:98:4f:e1:50:0e:bb:0a:1f:f0:00:
bf:99:93:d2:f8:2b:73:f1:87:1c:cd:41:47:db:46:
f2:9e:43:a1:de:f7:48:24:c1:f1:76:37:1b:6b:6e:
97:3a:64:b9:b5:4e:21:5a:9e:94:ba:eb:f4:30:9a:
7d:b0:4a:00:3a:d4:2b:1d:70:60:c9:ed:5f:4f:0b:
29:f1:c1:e7:0a:88:7d:e7:5b:d9:97:67:74:c8:f1:
37:61:26:57:07:f2:04:5f:04:7a:6f:f5:92:30:ca:
29:79:05:19:7c:35:ee:96:e5:cc:ab:0e:56:1b:51:
3e:4c:b3:c5:b3:c9:61:34:4f:85:66:09:a1:73:3d:
e9:96:08:f1:0b:33:b2:2c:e4:c1:65:3b:1d:20:57:
4b:94:3f:4f:cf:60:11:34:4e:98:bd:eb:d2:35:e0:
cd:09:fd:86:a0:6f:84:9c:b6:e6:67:03:d6:e3:8c:
4d:0e:59:43:07:00:d9:db:d7:ab:3a:10:c6:99:59:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:C3:49:16:05:EB:1C:D9:89:57:47:51:5F:C7:55:00:EB:D6:58
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:08:47:29:76:ac:f4:8a:fe:51:a4:e1:a8:9e:26:de:dd:b0:
e5:42:18:3b:22:e2:bb:31:9c:b6:9d:c3:9d:a9:1f:d6:f4:09:
fb:66:ed:f0:c0:78:12:54:cc:77:3c:93:62:17:c0:6a:e3:a4:
ca:e4:c5:04:07:c6:0d:58:80:f9:86:a7:6a:e2:c5:c0:33:f4:
9d:ef:dd:5b:0f:6d:dc:b6:10:9a:fb:50:34:28:9a:ff:57:4d:
d5:2c:43:e8:61:49:be:90:80:7f:85:a1:36:d3:16:7d:37:c6:
6e:d5:49:64:9a:89:39:91:9c:03:70:16:22:51:43:1f:5f:3f:
a0:5b:4c:69:3a:00:af:f4:90:fc:20:66:b0:e3:bf:58:f0:28:
6f:80:51:42:e1:10:71:2e:a6:28:3c:3e:f7:85:04:94:9b:9e:
b7:33:71:a3:fb:37:a7:6a:2e:c3:e3:fc:a6:06:8c:bf:a7:e0:
92:9f:42:a3:35:3d:fd:37:72:52:a0:40:7a:2d:a0:ff:a0:07:
25:e3:15:81:f2:2b:03:75:c8:da:b7:68:7c:63:cf:96:83:a0:
d0:35:69:a1:d6:02:07:38:3e:98:21:2e:79:6f:9e:7b:88:79:
22:df:bb:57:b9:94:2e:79:8c:64:d6:d3:d6:d0:40:92:5e:1e:
3c:10:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:05 2025 by rpki-client