Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: SbTtu2XbCPzxdYk/4CqebDfQOGmkZVcU7lR550MF2Pc=
Subject key identifier: 51:6C:9F:7C:5D:F9:6B:EA:77:BD:BD:A4:15:F6:A0:93:8C:6D:58:67
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 0198D5F1C341B9B16909E177349D9FCBD109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: keO9RRKc8QUqVnutGhdU27vbFo9A+5dMa1css+E8KS4=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c3:41:b9:b1:69:09:e1:77:34:9d:9f:cb:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=516c9f7c5df96bea77bdbda415f6a0938c6d5867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:da:68:f0:c4:dc:4c:7e:e7:8c:b7:1a:f1:9a:
5d:3f:c3:8c:6c:ef:84:ac:24:eb:b2:2e:67:b9:85:
89:88:81:87:c8:07:14:74:7d:62:21:19:61:50:e9:
7e:ab:3d:cc:eb:94:3f:b0:db:76:82:9a:9f:8e:d9:
86:d5:92:24:20:b0:4c:83:9f:4a:c7:76:4e:9e:27:
9a:7c:a7:5f:d3:68:a6:45:9b:07:6f:50:a0:ae:02:
a5:34:16:90:b8:99:aa:b7:2b:c9:1b:f9:32:be:6c:
43:1b:8b:7b:34:bf:f6:99:82:85:bb:4d:b8:07:03:
72:c5:96:29:16:29:c4:fb:1b:d3:47:0f:78:91:03:
66:4f:45:0d:60:62:73:33:81:23:db:83:5a:99:47:
d9:9a:9f:f8:01:8b:c1:ea:26:88:8f:45:bb:5e:95:
8c:ad:68:70:06:75:5e:74:fa:ce:c9:77:f2:2b:2a:
31:ba:6c:2d:1b:1a:8d:2b:ae:eb:d1:d6:f1:e8:68:
e6:8e:62:2e:71:e2:3e:53:9e:4d:7e:bc:bd:86:0a:
13:ad:6f:e3:9d:18:ee:92:0b:fd:b5:ba:31:0e:34:
8f:1c:79:12:48:19:94:93:f3:a1:e4:b1:83:01:c9:
ad:21:18:da:a8:13:b8:0d:b1:cc:b6:8c:7b:f3:f3:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:9F:7C:5D:F9:6B:EA:77:BD:BD:A4:15:F6:A0:93:8C:6D:58:67
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0f:68:28:53:4b:2c:19:8f:ea:0b:36:42:18:35:bf:62:ec:
61:8d:31:28:b6:7f:1c:6a:6a:d7:cb:8e:88:2e:eb:85:a4:65:
e0:ed:0b:c4:b7:f9:ff:9c:79:6e:11:da:0d:3b:ac:8f:50:e9:
39:40:e0:a5:53:16:58:6c:df:79:80:d4:41:4b:5b:b7:1c:63:
72:77:01:f4:fb:5f:5b:22:a4:38:21:65:4c:68:84:d3:a3:ca:
a5:cf:35:60:57:df:81:29:68:d1:b4:c9:14:10:7f:d4:4e:95:
ff:e8:03:cd:94:5e:aa:e2:aa:e3:6e:d1:c8:b1:d5:1d:3a:8b:
06:1c:32:4b:39:a8:70:51:c9:80:04:06:88:ef:cf:3f:56:67:
80:ab:f6:95:fe:c2:c1:b7:a0:9b:ff:b7:76:5c:c2:75:34:67:
32:0c:01:ca:48:6c:65:74:0c:7d:b0:8e:6d:eb:ab:7b:b5:86:
09:e1:fc:44:8a:27:d9:c0:ae:ac:74:df:4b:bd:14:dc:e8:97:
4d:33:42:5c:aa:26:c2:1c:f8:d8:09:56:22:b8:e1:76:04:01:
06:c9:0f:49:9b:8f:09:b0:17:ee:70:75:23:13:cb:a0:c3:51:
ba:8c:df:e2:5d:d4:0a:d5:e8:f3:14:66:09:03:12:d4:fe:2e:
6c:da:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:05 2025 by rpki-client