Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: GhtJl4mVbq0QwGtDERZYckGE1O05cNqMJqEofhHspso=
Subject key identifier: 7F:80:63:62:F6:5C:D6:EC:80:59:6F:88:6D:EE:61:E2:31:FE:73:C1
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 0198D4A80146A650C35E8C417D5490075B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 1318
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: GFPxXtauEyPNUuxvQLtvrmoGJnPb56dOJARDHox88N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:01:46:a6:50:c3:5e:8c:41:7d:54:90:07:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=7f806362f65cd6ec80596f886dee61e231fe73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:fe:bc:bd:55:10:b5:21:78:39:52:bb:f2:
bb:03:a6:21:e5:19:e7:44:01:f6:e0:a7:ca:21:1b:
92:b7:c1:fa:99:60:63:68:08:54:74:65:1b:f6:c0:
84:49:c3:de:bb:e2:59:19:54:52:85:ce:eb:42:c3:
30:a9:61:f0:65:64:70:fa:f6:b7:0c:d0:3a:84:23:
2f:67:17:20:c5:90:79:9c:ac:69:99:c6:96:5e:1b:
d6:fd:c5:41:bb:dd:7f:c2:4a:a0:02:14:4d:3b:77:
fc:54:2e:9e:97:ad:15:6f:30:e8:5d:77:73:52:fc:
74:45:f1:cc:06:01:bf:e3:3c:53:7f:dc:0f:5c:2c:
08:5a:a2:2e:05:e9:96:d2:c5:5a:20:00:17:a1:30:
7d:58:7b:10:58:a8:ba:4b:dd:03:a3:3d:3b:c1:00:
8c:63:18:7f:98:01:1a:d9:a5:f5:e9:7d:8c:a4:fa:
fc:43:03:ed:49:0f:92:11:df:58:36:12:ce:eb:c4:
24:11:cf:54:9e:3b:a7:e8:be:12:20:03:23:ac:cb:
bb:7e:51:ab:7e:d4:11:03:93:30:e1:a5:a1:3b:a6:
e3:e5:48:d6:b6:4d:a7:a3:29:47:47:7a:51:9f:a4:
8e:46:b4:0d:6c:a4:91:d1:bb:a2:60:43:29:f7:6c:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:63:62:F6:5C:D6:EC:80:59:6F:88:6D:EE:61:E2:31:FE:73:C1
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:07:b4:43:da:21:61:d1:00:23:ea:fe:0a:b8:ed:1d:5f:5a:
95:ab:c7:bb:1f:27:2e:d9:ed:85:60:6c:0d:da:b3:fa:04:35:
4a:d8:7d:50:49:50:b7:e2:82:8f:a6:79:09:b4:86:a6:e4:84:
4d:fa:c5:be:90:0c:d7:17:10:bf:88:d6:1f:b2:17:5a:10:af:
5d:37:cb:39:97:99:4b:66:10:be:b9:86:95:2e:33:e3:00:94:
f2:44:56:c9:60:5d:e8:3c:82:6e:be:10:93:6e:63:a6:db:44:
42:d7:26:99:90:a1:d8:0f:6c:79:0e:0d:55:d5:67:e7:5e:fa:
f1:f2:d6:12:82:fb:c2:3e:69:f5:bf:da:9f:c2:8c:4b:8c:f7:
ed:53:81:8f:8f:6e:f7:86:f3:f7:3b:cf:8e:78:64:2f:20:7f:
4f:43:13:20:57:d2:67:bb:93:8d:b9:94:50:8d:50:4e:49:3a:
9b:70:d7:13:97:52:f8:55:54:58:16:fe:23:0f:a7:97:dc:b9:
61:7c:73:40:f6:24:b2:5c:8b:57:cc:3a:60:4a:52:6f:48:ea:
3d:85:a9:10:44:01:78:e5:f0:91:f6:1f:53:d8:7e:98:2f:68:
10:20:1a:b4:58:52:f7:f4:21:a0:52:37:4a:6e:ef:d7:b8:03:
68:e0:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:26 2025 by rpki-client