Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: NO6AKLefCRdTnj2XzeTr3VFLv8bfWRfHFSqcZfWFag8=
Subject key identifier: FC:57:EA:9B:4D:91:4D:8E:33:1F:E5:D4:4B:BD:5E:72:1C:0F:45:E5
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0198D516067549906635B597140C33787C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 143E
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
4: PHQmVIOcdZjObRR1bnqaj4cEBeM.roa (hash: 5IKtO4KnNNXaPnyyNNQmdrLLMfQppiexYT6O1Fz+b9Y=)
5: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
6: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: UgrDaPGWrbtiGgAd4nwbE8HLtEii495fChQpQOLSEkw=)
7: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
8: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:06:75:49:90:66:35:b5:97:14:0c:33:78:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=fc57ea9b4d914d8e331fe5d44bbd5e721c0f45e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:b3:72:1a:9f:65:a4:34:01:51:2c:5b:35:
01:ac:ff:00:97:1e:1e:4a:fe:d3:e5:80:c3:a2:68:
78:39:2f:87:c2:b9:c8:e7:1e:a4:97:37:6e:41:e7:
c5:10:27:8e:7d:95:9a:a3:b8:0e:3c:b6:14:9d:d6:
d5:97:fc:34:98:25:3b:58:10:2f:38:f3:31:7c:17:
fd:c2:e7:a0:8e:56:7f:0e:ae:39:1b:fc:8a:eb:84:
49:00:a4:4b:c1:51:c9:af:1a:f4:4b:bc:94:b5:5a:
f8:82:e4:3d:61:ef:1a:bd:1f:35:6d:c1:85:0a:42:
08:a2:0a:26:22:7c:21:44:ca:13:98:40:a6:74:32:
11:31:e3:fe:8f:f5:c6:cf:cb:b6:7c:ef:5c:20:47:
36:51:bc:2d:dc:69:c2:c0:2c:5d:00:e1:9e:d8:cf:
36:c7:c8:dc:be:a2:d1:e8:14:68:d8:81:73:02:cb:
6c:94:d6:a9:4c:83:9b:6f:b0:04:85:94:91:b9:7e:
6b:6f:e4:c9:07:41:40:4a:8b:68:fa:cb:40:52:47:
91:b1:6c:93:9a:b4:ab:f1:45:ae:67:b5:a9:53:81:
a1:52:bd:d4:67:aa:50:44:8b:e5:50:cc:62:0f:35:
1f:0a:0c:8a:c9:10:1b:bd:f1:31:09:ad:ea:87:04:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:EA:9B:4D:91:4D:8E:33:1F:E5:D4:4B:BD:5E:72:1C:0F:45:E5
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:93:85:5d:ac:ee:13:55:ec:b8:41:54:7d:f3:6b:2b:23:0a:
1f:c4:c9:44:62:01:b7:52:46:e3:b8:c0:55:11:c9:e0:da:f5:
26:4b:24:09:b7:07:97:8c:ee:b2:98:71:a9:b6:b5:b8:da:20:
72:e7:cf:38:17:82:01:b5:ca:0f:87:f4:51:f5:83:3e:0c:43:
bf:45:c6:1e:06:b7:e6:eb:66:00:fd:ce:8a:2b:1a:40:98:d1:
dd:f6:3e:b3:de:ed:b8:a7:3b:4c:73:35:c0:6b:3d:cb:a7:15:
05:cd:b1:ee:2a:6e:f8:e4:b1:55:2e:1f:ea:f7:dd:2b:31:ae:
93:fe:62:83:53:4e:52:8a:a3:bb:99:40:ad:92:62:67:37:92:
4a:de:0b:ae:bf:41:4b:02:b3:35:58:2d:94:0e:42:86:09:aa:
d2:b0:75:ef:84:1d:d7:51:bc:c4:43:9a:66:fa:d3:b4:d3:42:
d8:35:bc:93:0e:15:2e:55:70:aa:fc:68:2e:5e:c1:4f:18:bd:
9a:d3:1a:18:b1:34:75:6a:b5:d8:f2:a1:14:c9:b9:28:6d:f4:
1c:b7:7a:58:d3:ae:bf:ff:2c:02:c7:f0:55:ec:e6:3a:ba:c4:
2e:e0:fb:17:04:1a:2c:55:89:38:74:66:7b:94:e7:3f:c8:c4:
6c:43:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:22 2025 by rpki-client