Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
File: lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft (raw, json)
Hash identifier: 8pzR/dZNUmS3UuTI/bfdW7Hd71Kb1Y6PX18FEMn/6AI=
Subject key identifier: 38:A4:7D:0C:00:2D:B9:26:24:19:32:A1:7B:7F:5F:3F:A0:DC:7D:7F
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 0198D54EBF63567923B343FAB1D8B8EC53AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
Manifest number: 0C0F
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (hash: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=)
2: lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl (hash: YXq1aNWbE7SwJ9mkOjUP7v4OGkgAIVXSzV4wKUQevt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bf:63:56:79:23:b3:43:fa:b1:d8:b8:ec:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=38a47d0c002db926241932a17b7f5f3fa0dc7d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:a9:05:d2:c4:81:0b:72:8a:b2:6b:8a:5b:
5d:58:1b:0a:51:d9:4d:1e:6f:8e:de:f1:fc:fd:05:
0b:34:85:b2:81:e0:ec:6b:a3:7c:f2:93:be:b9:c3:
62:71:27:f4:a6:d0:90:21:b5:96:39:4b:3a:c1:a4:
15:ca:90:54:fb:16:9b:a3:7f:b9:dc:b5:7d:f4:56:
84:13:3a:a2:aa:9f:c2:c4:72:fc:fd:45:9d:c8:58:
87:73:87:20:54:30:99:d2:f0:29:e1:bf:69:e2:f9:
01:4a:ee:0b:9a:24:55:59:79:ce:b7:ca:c8:05:7d:
f6:13:8f:78:d5:55:ba:c2:80:fc:17:b3:18:7f:f8:
02:91:45:2c:ae:1a:b2:54:70:db:ee:33:e1:83:d8:
bd:20:ba:dc:a7:a5:b2:52:6a:ae:80:08:77:1a:fd:
f0:71:c2:cc:87:31:59:ef:8d:40:bf:89:a5:87:98:
18:2b:ad:58:cf:fd:ec:5d:9c:2c:15:53:3e:f4:cb:
1e:48:16:0c:f6:f2:0d:91:c2:fc:40:56:5c:07:16:
62:e8:89:e3:e7:11:a8:2d:58:aa:2f:47:f0:98:37:
4b:54:41:b6:47:67:82:9c:11:18:71:ce:76:09:32:
5f:c0:da:33:f7:3b:7b:7b:a9:10:b6:c3:b5:98:c2:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:7D:0C:00:2D:B9:26:24:19:32:A1:7B:7F:5F:3F:A0:DC:7D:7F
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d7:a8:aa:e8:7b:01:24:60:76:4d:86:28:db:6a:fa:f2:0f:
64:c6:72:91:6b:e9:bc:b6:0f:8a:3a:21:0c:e4:da:d7:4a:31:
13:e6:90:c8:d9:ac:93:ef:7a:3c:a9:e1:1b:d6:b6:09:c8:c1:
7d:a5:e8:4c:98:93:fa:cd:2a:4e:9d:54:de:29:cc:9a:ed:93:
88:59:8f:e4:06:47:62:b7:fe:c0:c5:9c:0f:d0:da:45:37:65:
61:7d:56:93:63:54:97:cc:34:40:34:f0:b1:93:fe:63:f8:e5:
3f:35:f7:9c:d8:d6:ce:14:17:84:b4:19:ec:e1:0f:b5:c6:f6:
14:db:ad:f3:4a:a0:d1:20:a0:e8:65:6d:16:c1:1c:a6:fd:fc:
24:a8:44:73:73:0b:58:0a:1a:9b:c8:85:35:0d:0a:a0:21:09:
cb:7d:e3:65:40:8a:c0:e7:ae:e1:65:54:2f:9f:c3:bc:f5:67:
49:2f:35:13:5c:0c:5a:40:ed:bf:63:e5:34:d1:71:7c:a3:a7:
cf:b6:7f:f1:95:47:e4:20:78:af:04:c3:64:53:3f:d5:f5:1a:
bf:5f:da:bd:8e:94:4b:e1:9a:d9:01:bd:fc:47:47:7a:cc:b6:
8b:d3:f7:01:56:63:8c:8b:0f:f3:3b:f8:80:c0:f4:13:8a:de:
d1:48:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:57 2025 by rpki-client