
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: gPoRGVER7pFm/tsxH2akdacLh4+FWcRQWGbKTqXwcQY=
Subject key identifier: 21:95:5B:19:4A:32:E6:B4:C2:AA:69:66:C3:99:BC:34:51:6E:CF:B4
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 0198D660A47655AA3C60E610BE987047F984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0BA4
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: uua1J9CfAf2jkME+G/O4+UxFtCO0XDCKsAZC6MnGrQs=)
4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a4:76:55:aa:3c:60:e6:10:be:98:70:47:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=21955b194a32e6b4c2aa6966c399bc34516ecfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:4a:75:28:a1:d1:f8:35:15:23:e8:ef:02:
87:d3:72:38:2e:7a:94:5f:9d:f0:a2:2d:45:04:52:
f5:0e:23:d6:0e:17:98:a0:84:74:e9:81:9a:e4:5a:
4a:ba:22:b2:b7:19:d2:9b:33:08:22:68:38:f8:a2:
80:81:16:7d:a2:f0:1f:1f:ad:7a:26:a1:89:02:c1:
b0:1e:14:ae:64:77:ef:a7:1b:e9:92:71:86:46:41:
16:b1:5c:70:50:06:d1:3f:cf:d7:d1:fa:a4:5a:07:
bf:5c:1d:90:8e:0c:ad:2e:49:64:94:ef:7d:f9:51:
1b:17:91:80:7e:69:0d:a2:84:8d:8d:b6:ed:d3:3e:
2f:d1:bd:4b:ab:b1:e3:38:3b:82:b6:6a:c3:80:02:
89:d1:58:1d:94:b7:2c:83:aa:2b:9b:f0:5f:18:4a:
c7:4b:6e:9c:57:fa:d4:c3:dc:73:02:1a:f1:17:62:
6e:21:0e:eb:56:1c:16:41:21:03:d5:3b:ec:b0:ee:
3f:1f:3b:ba:c6:40:5f:3e:e1:99:67:81:b8:b3:d5:
f4:49:87:76:7e:77:2a:dc:c6:ad:45:14:b8:7b:d8:
a9:1d:b2:a4:97:26:5d:de:b3:b8:cc:e9:f2:b2:5a:
f4:27:d6:a3:ef:95:d4:10:db:26:73:9a:7e:b9:79:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:5B:19:4A:32:E6:B4:C2:AA:69:66:C3:99:BC:34:51:6E:CF:B4
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7e:17:54:45:81:88:29:2a:e7:88:b2:e8:57:30:30:e6:4d:
52:be:64:22:18:36:f9:4d:17:40:1d:65:93:c6:05:11:8b:d3:
09:82:3c:18:ac:0b:7c:a0:4d:33:03:6d:01:47:e3:53:04:f8:
2b:82:22:c8:f6:f3:ea:85:62:82:fb:b7:ef:0b:2a:90:96:e9:
ed:f9:bd:d4:6b:28:00:b4:d9:10:cc:16:c3:b2:3a:b0:bc:f5:
59:da:92:63:c3:46:94:6b:20:91:4d:76:56:59:d4:42:27:a7:
b1:b3:4b:5f:29:e9:ba:55:40:b1:ec:61:ea:40:dd:33:f6:0f:
53:6f:d4:1e:91:3c:b4:d4:9f:b0:3d:6b:83:a4:30:4b:e9:29:
d6:8a:e8:fe:80:e5:4d:74:62:8b:d8:a1:a8:e8:2d:6b:35:19:
d4:49:85:22:d4:56:66:39:48:ba:36:8c:82:44:c7:a3:71:36:
e0:9b:d5:64:01:2a:10:fb:f9:40:38:ac:15:78:8d:df:f4:ee:
a7:ee:46:86:bf:f9:63:bc:d9:17:79:8f:eb:96:23:fa:d5:7b:
20:dc:08:89:62:09:4b:89:ed:06:9a:f9:ab:8e:50:5b:7f:5d:
58:c2:e1:00:5b:36:bf:ea:76:89:e0:e3:1a:14:8e:0f:58:f0:
56:0d:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:57 2025 by rpki-client