Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: ukLW6sSFOeY8jZT9fif6JrAgeyR/ecMnOONPX5gu/JY=
Subject key identifier: 81:88:F5:9C:62:63:68:90:1C:C2:EA:5C:30:CF:1E:0D:09:DD:2B:36
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 0198D5BB936F8B0896F419355E5549679B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 04C4
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: 7UtrsNRYfI2Mo5A4/zmOW2ANZOYYW81Hf5PIqvZmRnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:93:6f:8b:08:96:f4:19:35:5e:55:49:67:9b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=8188f59c626368901cc2ea5c30cf1e0d09dd2b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:5a:02:24:13:b9:75:9f:99:a9:58:d2:66:
bd:a3:68:f6:fc:c2:2a:5a:b8:58:47:c5:73:d3:7c:
4e:75:b1:2b:99:9a:15:45:31:75:32:4e:f9:da:b1:
91:02:89:6a:98:53:b6:aa:7a:1c:ac:16:f6:cf:3c:
a1:b8:33:c1:21:2b:22:26:90:f5:16:16:da:38:49:
4a:46:60:3e:37:a9:19:6f:58:1d:67:1a:09:d7:0a:
a4:7e:de:94:7f:59:3e:1f:3e:b8:61:ce:2e:ea:67:
36:21:03:d6:f6:3c:74:e0:52:34:2b:0e:c3:b1:90:
f0:88:1e:40:d3:9b:b8:06:93:02:34:9a:e1:bf:e7:
e0:6a:e9:8f:f1:97:a5:6f:6e:fd:65:fa:61:c5:d0:
d1:e6:79:c0:8a:82:c8:db:39:6e:71:b1:d7:2d:da:
5f:4f:8b:b7:c8:b9:bf:c0:6f:55:f7:47:f1:76:c1:
f4:5c:8b:8b:c6:e3:18:7b:89:b2:bc:c0:d9:84:44:
5d:40:f8:10:00:00:2b:9a:87:10:3f:f7:e7:00:50:
f4:86:22:41:27:81:c5:9e:20:11:73:40:64:bf:04:
15:ec:4c:6d:98:8e:19:75:75:5a:e3:33:9a:bc:43:
42:14:12:80:56:9b:51:b1:f5:da:90:65:eb:09:88:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:F5:9C:62:63:68:90:1C:C2:EA:5C:30:CF:1E:0D:09:DD:2B:36
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:16:74:91:60:78:23:d0:1a:34:38:fa:7e:87:a3:93:c3:
c9:6c:77:f9:20:8b:18:7c:14:cc:a5:b2:c5:af:16:81:81:19:
b0:82:60:1d:71:1e:a4:bb:30:f1:59:84:69:43:cf:b5:b7:14:
6b:b0:bf:d8:fb:b7:bc:93:6d:29:fc:a7:cf:c3:ee:a5:fb:ef:
cf:c3:fa:eb:ca:e5:9c:f0:d4:6c:a0:29:f3:e3:59:c1:62:a7:
41:bd:c5:43:8d:2f:70:6f:ae:24:dd:c7:74:ce:85:65:8a:11:
17:ec:c1:12:94:83:0a:0c:5e:a5:b9:a1:fe:cb:89:2e:28:63:
46:a9:2d:35:a9:05:7f:cf:49:b1:87:32:67:b7:19:1a:4d:ca:
e8:79:ec:5b:34:15:df:32:5b:0f:b4:f7:8a:1b:95:19:1d:51:
b2:5f:65:3d:24:5b:e8:3f:51:15:41:24:11:7e:11:85:dc:5d:
5b:eb:46:01:bb:a3:fb:a6:1e:b9:ae:63:0e:50:fb:0c:33:df:
6e:b5:92:6e:ad:c3:c6:d1:14:40:0d:c1:14:ff:ab:14:fd:47:
4b:b9:29:db:57:b3:5b:c8:29:cf:eb:94:f0:39:42:d7:22:86:
f1:4f:43:73:2a:81:59:e7:68:ae:81:92:e0:84:ba:1e:3d:83:
de:e8:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:53 2025 by rpki-client