Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: CBHt8PpzQFewfxB6J4dNewavT/uBIvkXf1kOtnXk0gc=
Subject key identifier: 72:FE:7F:E4:07:26:41:B0:0E:CE:3B:A2:B2:AB:39:33:DB:D4:EB:FF
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 0198D66004DC3A4B1BA995354AF88C1CCA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: 0Zq8lg7WHJoM8B9wChi0_ufiBvI.roa (hash: s0nTtnQSHrND4DvUtBRsZ+0MomnwjVLtYm6521AA6YU=)
2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: RSE3ahT55IW322twjT0mNDZDfW7UmqSDmZi6tHSTzgk=)
3: MuuzFIyNpWZONMllHbmnXx8HRv0.roa (hash: U3fGXgKZfpms0csUXLU3nnmhzkgEcT4L/f6Vy+UF3Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:04:dc:3a:4b:1b:a9:95:35:4a:f8:8c:1c:ca:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=72fe7fe4072641b00ece3ba2b2ab3933dbd4ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:f0:04:3f:ba:ac:c5:98:5c:78:ab:4f:95:
b9:5b:7b:a3:f1:93:88:98:8a:70:ec:94:a8:e5:99:
a8:39:72:99:80:5d:72:5d:32:c8:33:ff:bb:49:4a:
dc:bd:e7:6e:73:75:ef:3f:ed:79:c5:13:f4:65:ba:
f8:63:88:ed:94:6e:b7:10:00:d1:89:90:24:d8:8b:
98:41:3f:c1:f2:cf:9e:6b:60:39:c3:e2:72:5d:2b:
76:d9:a4:53:d8:06:5d:f1:e3:2e:c1:1b:72:7c:98:
ca:42:90:20:dc:d5:11:7c:e7:56:39:70:64:f8:81:
73:c3:da:7e:c5:93:30:ee:78:c8:ee:54:de:63:c2:
18:15:61:4e:15:e8:6c:3d:d4:5b:a9:b5:cf:bf:eb:
5f:ec:e0:02:e7:16:ea:dd:5c:d7:39:9f:10:e2:24:
8a:23:a0:a5:bb:46:a1:db:3b:bc:a7:49:21:e8:af:
61:10:21:71:81:e0:bc:02:96:bf:04:96:af:fd:69:
99:72:47:c1:72:0d:52:90:a8:2f:ed:65:b1:30:c2:
70:04:98:41:ee:ee:7b:99:fc:84:5e:fa:0a:3c:48:
c3:1c:7f:ad:68:3f:a0:6e:a7:30:76:81:42:e0:4c:
a1:b4:08:a7:9c:81:6c:3a:73:6e:f1:5d:92:25:b0:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FE:7F:E4:07:26:41:B0:0E:CE:3B:A2:B2:AB:39:33:DB:D4:EB:FF
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:74:0b:0f:ef:a7:22:13:9f:1c:34:66:2d:54:67:d5:21:
da:b9:fb:6e:74:6d:a5:b1:f2:d2:9d:fe:92:4c:38:81:4a:cd:
16:bc:ae:fd:c3:be:11:13:63:87:51:f6:66:67:16:07:49:2b:
89:c0:40:62:18:c0:a9:b8:35:ef:57:ff:5f:d3:7f:66:31:8a:
5d:d1:b8:00:48:a6:53:7d:5f:99:5d:56:1a:1c:aa:1a:07:60:
b1:37:0b:29:af:f3:1f:ca:22:67:1f:af:ad:69:3c:40:49:76:
fd:1d:19:fe:f3:bf:15:5b:84:0a:63:a6:f5:4d:03:92:ca:1c:
15:fd:e7:d3:e8:4f:71:82:81:0a:79:74:03:72:c7:78:d7:88:
c6:2d:77:e4:bc:56:aa:f0:41:8a:61:b3:34:bd:b9:b9:08:13:
a1:e7:de:bb:21:a6:bf:e3:4f:14:24:84:79:99:88:dc:4c:69:
23:19:ea:1a:54:b0:77:a3:36:96:02:a1:b2:c7:0e:7d:5e:58:
27:95:36:8f:c1:4d:56:75:b6:74:f5:4f:2f:f6:39:b3:e6:ea:
c5:0f:e7:1a:c6:9b:4b:36:4a:72:dc:01:9b:82:49:e2:bf:15:
ba:18:1f:c0:51:4a:52:3f:ed:d1:ea:3b:fb:65:24:4c:3a:53:
01:c0:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:13 2025 by rpki-client