Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: DQDvNpQHh6TLm0rSjMzxIlYXz5kDUvv+yLXD04IWFL4=
Subject key identifier: C0:50:D5:16:DB:BC:1E:F3:52:83:EF:02:60:C4:3E:48:29:D5:4B:86
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 0198D73B3A9AEDF8FA7521BD672987123C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1205
Signing time: Sat 23 Aug 2025 14:00:39 +0000
Manifest this update: Sat 23 Aug 2025 14:00:39 +0000
Manifest next update: Sun 24 Aug 2025 14:00:39 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: sx7dqItd37KhuTahUmA8cAdDO3wGXPl85l2SICcad7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3a:9a:ed:f8:fa:75:21:bd:67:29:87:12:3c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Aug 23 14:00:39 2025 GMT
Not After : Aug 24 14:00:39 2025 GMT
Subject: CN=c050d516dbbc1ef35283ef0260c43e4829d54b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:0f:e2:71:df:83:fa:72:8a:54:e0:59:3c:
65:dd:83:4e:1c:f9:c5:b2:2e:1a:42:fb:a3:2d:d6:
10:ee:62:35:88:ab:76:ad:e8:2d:ed:bd:bf:48:06:
da:84:d3:28:af:55:9d:b2:31:65:46:d8:31:f3:93:
aa:35:e0:b4:ce:10:dd:76:b3:9d:e7:0a:5d:68:1b:
67:57:87:2d:51:02:14:e9:25:26:50:72:6d:ff:32:
aa:ee:fe:63:95:af:be:c8:a0:64:2e:8a:6a:ad:38:
47:dc:a0:2c:3e:9c:89:59:62:87:90:5b:22:ec:77:
4e:e5:a9:64:cd:da:5e:e8:56:ba:99:fd:03:82:fc:
61:18:17:77:db:71:9c:7e:79:08:e8:cc:47:8b:bd:
c7:dc:ba:df:ac:6c:e0:53:1a:3f:07:82:c7:54:f9:
cb:72:3c:65:df:06:7b:27:89:89:a8:9e:3e:d1:75:
75:c7:55:0b:51:61:c1:29:fb:d3:ba:fb:2a:65:45:
8b:ef:2b:97:a4:65:ef:33:37:df:6b:eb:3e:8d:99:
bc:39:53:70:08:51:25:51:cd:df:5c:87:f6:2d:10:
d7:63:c1:30:86:12:f1:70:05:15:7c:a0:59:1a:44:
6a:c1:29:e1:11:8f:66:30:ec:35:c2:f3:e5:4d:bb:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:D5:16:DB:BC:1E:F3:52:83:EF:02:60:C4:3E:48:29:D5:4B:86
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8d:f8:a9:03:02:39:59:06:eb:d9:28:a4:af:41:f0:d6:0b:
0d:8b:1b:4d:f9:be:e5:e2:38:7b:dc:4e:45:08:e3:33:90:9a:
1c:4a:4b:c0:a3:2b:a6:b8:01:70:39:8f:b0:32:06:39:e3:18:
a7:fe:0b:7b:3c:2f:98:3d:4c:8c:b2:37:b8:48:a4:07:67:54:
1c:1c:7a:b2:17:66:87:1c:03:14:7d:20:37:ef:dd:5f:0e:b3:
92:52:52:f9:f3:cb:a5:7f:b6:ef:94:5f:42:92:02:ed:c1:8d:
12:f3:29:a1:1b:f8:9d:1c:48:a7:ba:d3:4b:5a:d9:1a:58:e2:
cc:d8:67:9e:4e:73:2f:3c:ef:b6:81:40:49:be:e2:7a:38:89:
5a:cb:24:4d:89:84:e4:a1:94:4e:1e:fb:17:47:ea:46:a2:9d:
61:ac:66:97:70:bb:2c:b2:08:44:d5:cb:2a:1b:6a:e0:db:dd:
e9:24:12:f9:b2:77:1c:ac:17:db:54:e9:52:0c:ab:54:02:97:
fa:01:ec:2e:68:08:94:89:f1:69:68:22:4b:d4:01:2e:f1:4b:
67:a5:34:bd:71:be:9c:41:4b:4b:94:4e:8c:13:31:92:f0:52:
5f:71:0d:7c:ca:70:7b:c8:cf:ce:e2:1b:b1:12:76:a7:fe:16:
cf:e7:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:08 2025 by rpki-client