Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: Qio4wS0SbzE9bC4YFh55Og0bkKQZf9qssJAzExT/Tw4=
Subject key identifier: 58:5A:DE:0E:12:D7:61:3C:BD:99:C8:35:26:9A:2D:3F:18:80:28:28
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0198D472694BC0669A5A0B2842CD90769901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1361
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 7HdbAJbtscXSzFZEL819KirHgpbXecsI+6sBGuaqMJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:69:4b:c0:66:9a:5a:0b:28:42:cd:90:76:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=585ade0e12d7613cbd99c835269a2d3f18802828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:e2:13:e8:87:eb:e0:a1:9f:c3:d5:ff:4c:
8f:89:b7:ed:5b:8c:ca:f1:c3:e4:19:5e:70:d2:44:
af:51:c0:7e:00:62:ab:a7:9f:f8:bd:c7:ae:0c:74:
3c:2e:80:a7:90:90:97:84:cd:3e:7f:f8:88:8f:ef:
56:8b:62:49:21:af:5e:5a:fd:17:b6:71:2c:1a:34:
1d:e1:a9:6a:4d:78:4b:5f:07:5d:d0:12:24:51:62:
e4:12:ed:a1:37:c0:10:f6:4d:81:ff:00:d5:ac:dd:
29:a4:17:97:26:8c:30:a8:4a:54:bd:69:dc:0c:ee:
01:cd:bc:77:aa:52:13:49:01:6b:1e:a1:5c:b2:c7:
8e:0e:0f:41:4d:9c:8f:11:10:cc:cd:e5:96:da:c8:
6a:69:fd:c3:59:d9:73:00:47:5c:f3:38:22:59:7f:
bd:d8:99:fa:d3:e4:bb:5d:9c:33:9a:98:94:d2:21:
28:cb:42:c0:41:c4:6f:80:1f:fa:07:89:e3:60:0e:
2e:6a:40:29:46:d1:94:68:fe:a7:7d:e9:a8:5c:2a:
52:7a:26:83:8d:bc:61:e2:29:b8:d2:89:91:fa:6a:
a4:fb:da:82:da:d1:15:87:b6:73:5b:81:03:77:af:
55:fa:58:7f:4a:6f:a4:50:3c:43:34:c8:dc:42:bd:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:DE:0E:12:D7:61:3C:BD:99:C8:35:26:9A:2D:3F:18:80:28:28
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:7e:ff:8e:60:e0:f5:17:64:97:41:3a:9d:9a:88:63:18:
a1:8e:28:d3:c7:88:a9:12:9a:53:31:c6:cd:3e:0d:29:31:00:
18:cd:71:1e:51:ad:e9:64:38:7c:3a:89:c6:9d:be:ba:f8:6b:
ce:0e:d8:03:32:21:28:fc:10:6b:61:30:b5:48:18:88:20:a8:
1b:80:bf:62:af:53:f5:9c:5e:6a:87:cd:21:f2:1d:e4:86:f8:
3f:b9:f4:cd:d3:28:10:d5:e9:a8:6d:30:67:b1:74:47:4a:93:
f5:23:80:26:9c:dc:b1:0e:2a:2a:0b:a4:f4:94:f0:30:0f:69:
1b:8f:46:ec:a0:c2:c0:c6:86:21:6d:6e:27:68:41:ed:4b:60:
bc:f2:ab:d9:3a:cd:73:bf:8b:79:c6:88:c7:7c:d2:ea:25:45:
b2:4d:23:da:bc:2f:0f:c2:00:a2:9b:7b:fc:98:ae:bb:29:30:
57:12:3b:43:1a:d7:ad:b7:17:ac:e5:58:57:22:7c:88:5c:0b:
68:7e:cb:bb:81:8e:10:f0:94:f8:99:f7:ac:6c:c2:3b:dd:59:
4f:b1:a3:51:f4:6a:d3:f6:82:86:14:11:e1:90:71:0d:9d:d7:
a2:4f:64:8e:d8:fd:6c:1b:5f:3a:80:90:32:e3:a6:88:65:12:
f0:95:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:16 2025 by rpki-client