Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: vpub1N4xB/by5tLnDzZbrq8RAeKRtyB5mG/00XAdjXQ=
Subject key identifier: FA:7B:8C:2E:14:BA:FB:81:57:23:18:6B:2E:BC:A8:D5:DD:A8:67:30
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0198D54DD05551DE1666B321B19DD45B9A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: L+54KrO6tywA65m877EOm5S6VwYSfnhrAjDts27e5Xw=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d0:55:51:de:16:66:b3:21:b1:9d:d4:5b:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=fa7b8c2e14bafb815723186b2ebca8d5dda86730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:da:f5:be:82:91:12:3d:6f:cf:20:09:9f:
cf:aa:a1:46:0c:d3:2e:ef:ef:ef:71:1c:fb:58:05:
5c:c0:78:39:c7:30:00:78:e3:de:f2:64:c0:cd:95:
49:cf:e1:20:c5:2e:af:60:bc:22:f3:4d:27:25:fb:
90:5c:65:fc:2e:cb:40:e6:40:f8:c1:d1:3f:a1:72:
2a:c8:92:d5:0d:c4:14:aa:b3:3e:dc:18:b7:0a:14:
be:a8:fa:6a:25:8b:df:28:3b:4a:25:0b:03:04:bf:
03:d0:7a:e4:4c:c9:aa:a7:e4:ea:ad:ba:90:68:a1:
80:23:97:1c:70:1e:4b:42:f1:fc:f2:ea:9e:03:2c:
6a:13:85:4e:2e:74:f3:c8:87:47:9e:7f:af:0e:7c:
fc:ae:ec:a6:4a:9f:9b:47:ac:97:18:d6:8c:97:bf:
78:62:d6:f0:9f:64:ca:24:2b:4c:a0:a7:82:07:f1:
8a:8a:1e:32:e9:4c:ba:95:0d:bb:7c:4d:4b:07:06:
6f:32:2d:b2:dd:48:56:0c:c0:8d:b2:72:53:95:66:
5d:34:38:fa:d6:fb:a6:54:52:41:b5:1b:0a:07:ac:
e4:25:91:26:cd:c0:87:c0:56:ce:9b:84:7e:2b:eb:
15:c9:d3:f0:35:36:30:44:57:27:ba:03:64:43:04:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:8C:2E:14:BA:FB:81:57:23:18:6B:2E:BC:A8:D5:DD:A8:67:30
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:38:71:11:b5:23:3e:af:61:6e:e6:0a:4b:e1:69:ab:67:74:
05:53:c4:d0:d5:0c:b5:9f:b6:ee:8e:85:9a:ea:b3:9b:9b:b7:
1d:c2:f7:9e:84:45:68:99:e2:9f:b9:76:66:76:bb:e4:8f:05:
b6:b3:0b:59:d6:9c:b8:a7:34:5b:2e:ad:c5:85:72:13:d8:30:
c6:29:24:b6:30:5d:dc:75:64:cc:67:8b:bb:3d:85:16:6d:4b:
d1:d4:f4:73:86:e6:e8:f0:c6:a3:f4:39:fd:62:87:cb:2c:6b:
de:84:3a:65:a3:68:42:2b:0d:4c:7f:e9:da:c8:71:21:f3:08:
88:cc:c5:de:60:68:82:5f:5c:2a:94:4e:c0:0b:98:ea:54:1a:
18:f6:f3:f9:7f:cb:90:5f:ac:6a:33:d0:48:92:a3:e6:e9:47:
6d:2a:c1:be:cc:56:00:c3:c9:4b:b3:14:e1:3a:b3:e1:5e:d5:
35:e6:08:bc:69:42:06:cb:d8:ce:aa:7d:63:da:5e:47:ad:1b:
eb:6b:2e:cb:ec:13:b7:2a:31:5e:6b:60:02:64:66:94:97:12:
99:99:36:9b:bd:63:c8:7a:a8:5d:f6:e0:98:5a:15:59:f1:df:
f0:c9:bb:f4:63:94:78:f4:3b:46:b3:41:37:b2:b4:e5:f4:45:
ed:c5:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:48 2025 by rpki-client