Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: R9OxH7CMFKCKajwgsEwiiqKEc54NO97FbINbkDIVga4=
Subject key identifier: 4A:8B:A3:BF:49:95:C2:77:C2:F3:D3:61:A1:31:C0:AE:5F:F3:C4:5D
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 0198D4738DF2B089F42DD0FEDE9F2194121B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: MwnXqFvVvHUoPzQjKXIwLsW8/RSw5A9mRFgrDGPlYpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8d:f2:b0:89:f4:2d:d0:fe:de:9f:21:94:12:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=4a8ba3bf4995c277c2f3d361a131c0ae5ff3c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:53:50:4b:45:07:24:e9:ee:2e:ef:51:a8:
a4:ed:78:02:b3:f7:86:e4:67:ab:db:f8:0a:9e:58:
c9:3f:08:b5:18:eb:51:e9:03:81:12:64:40:24:94:
66:48:76:70:9e:73:be:96:a4:d1:23:d8:7e:4d:ee:
27:08:81:86:3c:15:02:cf:ea:81:b0:36:75:39:ca:
0c:84:38:be:7f:04:83:97:75:ca:77:71:24:4d:ab:
1c:92:f9:68:d9:f3:96:e8:df:93:40:66:b6:42:34:
2f:61:fb:23:98:d9:7f:99:ae:a2:b6:ad:b5:be:92:
d4:4c:5e:28:50:3b:ad:d2:15:a7:22:e9:ad:f0:44:
f8:a6:2c:76:11:4a:43:a2:35:42:eb:b8:89:b3:72:
9e:24:35:01:32:f2:da:01:a4:af:cb:5c:51:d8:db:
11:b1:52:83:ad:f5:7b:fb:8e:ae:3d:c7:91:4c:d0:
1d:c5:6d:11:35:9d:2a:b3:a4:55:08:a7:89:fe:63:
90:44:a6:42:88:6d:e7:89:3d:f3:5a:48:6e:3e:74:
d9:eb:f7:d7:e5:27:b7:77:ad:fc:37:74:e0:14:4a:
38:2b:a7:c3:77:fa:68:fd:f1:55:d5:bc:ac:e6:d8:
4a:85:7f:a9:3c:1a:58:9b:52:9e:84:e8:ff:49:81:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:A3:BF:49:95:C2:77:C2:F3:D3:61:A1:31:C0:AE:5F:F3:C4:5D
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fb:f1:3d:05:30:22:ff:41:89:60:0f:cf:36:1b:6c:ac:b1:
bd:5d:f7:f1:4f:b2:33:3c:5b:e3:29:97:f0:60:f3:1c:6b:b6:
41:8e:d2:74:6b:4f:6c:f9:57:91:4e:70:bd:31:cc:3e:39:58:
5c:6c:34:7d:76:92:22:3d:4b:26:70:8a:bc:95:16:98:03:be:
b1:47:19:ff:3f:aa:e6:98:9b:16:17:47:a5:d4:87:bd:5d:21:
16:02:32:11:2b:aa:56:39:b6:d9:2c:fe:3d:2f:7c:3b:c1:c7:
d1:74:03:cb:62:c0:69:db:70:15:bc:68:df:2d:56:61:de:8c:
e0:d2:67:c5:2b:2b:d0:05:1c:50:4e:50:0f:a5:9c:eb:68:e3:
b0:a4:a2:92:f7:95:93:5b:8d:e4:1a:2a:bc:08:d8:8e:69:15:
46:46:93:64:db:27:52:a1:81:94:bb:74:63:8a:92:16:09:21:
7f:4d:03:61:a2:42:46:95:f4:68:f7:b1:54:d5:d5:34:ae:51:
72:67:49:8f:68:7c:d4:b2:5b:60:22:a2:25:56:64:39:f1:59:
ef:aa:cb:45:8e:28:f1:30:7e:fb:e2:25:ed:71:95:b3:4b:18:
5c:c1:37:f7:ac:82:6f:99:e3:60:d3:e3:6b:45:61:e0:ca:88:
fc:68:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:27 2025 by rpki-client