
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: 4FTWgbrClmAugRBE2CqXc0cJCubgXVZAGZTQ1RsPvZQ=
Subject key identifier: 4E:09:5E:77:E3:22:D5:A2:39:48:CA:CA:BA:75:4A:E7:7D:87:BA:5E
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0197B7B357015E319276D938C21DEB75CAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 018E
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: qq+f6ewOb6Vf+0wOCC8fDGluGmwprkGu0LtEZcz0YlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:57:01:5e:31:92:76:d9:38:c2:1d:eb:75:ca:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=4e095e77e322d5a23948cacaba754ae77d87ba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:60:25:fc:e0:36:ca:78:f6:bc:04:8d:71:
bc:06:54:33:0c:28:31:e3:5e:6c:92:54:3f:65:54:
54:2d:9c:4e:3f:46:64:0a:de:d6:3e:4d:ec:20:10:
a1:c4:5c:bc:3f:dc:56:2d:c7:69:31:4c:57:b9:cc:
a6:6f:59:cf:bd:d9:a2:44:ab:3f:f2:ee:15:62:f5:
d2:0d:2e:d9:8a:dc:a0:2e:bc:1b:55:5b:5f:8b:a0:
55:03:bc:d1:86:7b:ec:73:9e:7d:b7:34:6c:d7:5d:
c0:11:aa:85:68:36:22:87:ef:a2:40:d6:88:c2:6c:
44:e6:7f:11:e0:87:8d:c7:c6:40:2f:2f:4b:0d:55:
e9:88:a9:57:76:68:b9:51:60:c6:ac:66:3b:5a:bf:
02:94:26:f8:67:ee:b7:37:41:15:1c:05:8d:41:48:
c5:22:b7:25:f6:63:19:12:f6:be:f5:52:8a:4a:37:
ab:fc:38:a1:c6:0a:9e:66:45:13:8e:8e:4e:25:3e:
42:31:66:d2:7b:a5:4f:82:8d:42:42:0f:ef:53:d5:
aa:75:b8:4c:31:25:14:14:21:2c:f0:96:da:9a:ef:
1c:2b:4f:53:10:49:dc:c7:89:ab:70:32:11:0f:f7:
a5:ac:c5:46:5e:e1:de:67:43:c6:82:f6:25:27:0c:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:5E:77:E3:22:D5:A2:39:48:CA:CA:BA:75:4A:E7:7D:87:BA:5E
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:88:e0:05:15:e1:ed:e5:69:33:12:e7:e8:c8:2e:b2:5b:
61:dd:43:59:cf:27:d8:9f:0d:9a:8b:1c:41:1c:81:9d:04:e0:
22:0e:4c:c4:d1:f7:84:06:af:8b:cc:6c:72:84:0a:38:03:00:
67:15:3d:6d:bf:b9:72:5d:0f:4f:ca:76:03:ba:fd:12:a0:51:
06:36:67:7e:74:60:05:ba:27:02:b2:10:97:ee:b4:1f:90:f2:
ad:8d:56:66:36:1f:01:bf:5a:6a:79:d9:e9:1d:3e:f3:76:e6:
c3:72:f6:90:92:a4:03:17:1e:d6:80:e7:f5:1b:71:9a:c7:d4:
ec:5b:42:a4:b2:cd:b8:3a:db:9d:38:d2:9a:dc:a0:0a:ac:44:
fa:5b:8a:9a:1f:f8:c7:db:a4:cc:52:fd:02:d0:ae:1a:3a:1c:
b5:d6:e0:4f:93:25:84:b4:c6:7c:10:39:0d:46:71:ea:52:bf:
4f:31:ca:5d:dc:e9:88:04:1b:49:26:f3:ea:d9:a0:63:fe:1a:
96:f9:ff:f6:db:22:a3:e2:d3:22:c6:05:22:84:47:68:3e:c5:
53:97:50:99:17:c7:4d:b8:76:39:0f:9c:76:15:4d:c2:29:22:
50:8d:99:3a:50:05:dd:69:8f:9c:4d:c6:ff:90:79:4f:e9:f8:
1e:1f:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client