
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier: xpPu68JlVOE7Emd2DDIrSRr/GJxj00dM8RcCJTgLXEQ=
Subject key identifier: CD:00:F8:0A:AA:9D:6B:C5:53:CD:5B:99:4D:4A:B8:8D:5F:01:A9:9F
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 0198D4E062483D73964948D0A84188E4191C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number: 14DD
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: eUapim9vlnQdl7+cmUF6RsmPxFFpiebfDcDautOVa98=)
2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:62:48:3d:73:96:49:48:d0:a8:41:88:e4:19:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=cd00f80aaa9d6bc553cd5b994d4ab88d5f01a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:59:02:5c:55:30:f0:4e:74:d1:d4:48:ba:
9b:57:6c:8b:2f:4c:3b:2b:c7:d7:dd:c2:4c:36:a3:
44:9a:44:c7:30:1c:87:4e:60:2d:a7:79:76:45:43:
5a:7b:2f:e1:bc:41:3b:34:98:9b:a8:90:06:8c:99:
b2:8d:c7:e6:31:72:a5:65:d2:f6:13:c3:d4:fb:c1:
70:42:71:2d:db:6c:28:da:2a:74:e8:b3:18:72:40:
73:5c:6e:f8:0b:fe:7b:3c:ee:70:bf:44:99:e6:ce:
f6:7f:b5:99:57:af:6a:1e:22:02:fc:9f:08:8d:24:
66:7b:b5:3a:38:4d:78:dc:54:4e:3d:ec:4f:c5:e8:
cc:66:8e:c8:36:28:8e:fe:42:81:45:98:ff:11:ab:
14:a6:f7:3c:d2:90:7f:e8:d3:85:80:88:10:6e:77:
0c:1e:9e:ba:64:24:4d:cf:c3:8e:ae:ac:7a:30:2b:
9a:69:a5:0a:1e:e5:a4:41:76:2f:00:64:5e:ab:e1:
67:ef:7b:5c:9d:27:3c:04:2f:99:2d:7c:f6:f1:2d:
76:9c:e3:80:e0:cf:04:e0:bd:7f:c5:98:f4:f6:ac:
6d:33:ca:fd:85:a6:bd:37:e4:c2:93:dc:0f:59:5f:
65:a0:fe:b1:7b:b1:f1:e9:de:9b:13:b2:ab:27:5a:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:F8:0A:AA:9D:6B:C5:53:CD:5B:99:4D:4A:B8:8D:5F:01:A9:9F
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:06:9b:45:ac:37:e8:79:4e:55:7d:87:13:aa:2a:a7:ec:
7a:cd:f2:44:66:a0:8c:90:98:62:a9:8f:a9:5a:55:a2:5b:3f:
ba:7a:a6:be:b6:7d:dd:72:ff:b2:fd:1c:37:a1:8e:95:e8:49:
e5:5d:dd:ca:4b:5b:a9:83:f1:64:26:b7:d5:24:ca:8e:81:10:
03:cd:7c:ae:58:b9:1c:58:cd:bd:1d:b1:51:ab:22:96:1f:4f:
45:c7:87:94:10:54:44:e7:24:75:f2:f9:8a:d2:3b:0f:f0:21:
8a:97:b3:6d:2a:1f:b3:05:e0:33:7e:38:1d:86:2f:ef:a9:2b:
36:53:26:98:fb:f9:85:fa:fd:83:e3:46:30:71:7b:2c:82:3d:
d8:e3:85:c6:b9:01:82:17:ee:f6:1d:c8:6b:04:c3:90:96:d7:
93:5d:2a:07:97:64:db:44:70:87:55:5f:bb:9c:ca:ac:ef:0d:
8d:34:0b:5c:26:99:3a:9f:32:6a:b5:5d:67:26:27:7e:c5:63:
c2:4a:79:70:15:10:30:e1:f3:25:19:3c:e6:0a:e1:c0:b2:79:
2c:04:f8:7e:52:14:f1:18:e2:6f:20:b9:de:c5:22:de:8a:e4:
7e:5e:2c:8c:dc:70:56:7d:d1:b6:f6:59:b4:d3:37:19:38:51:
cb:a8:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:08 2025 by rpki-client