Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: j0wN/bYe4OrH0Ncn9af94GfqzVqKHLwxw8ca5xXB9Sw=
Subject key identifier: 50:B6:78:0A:43:9D:1F:16:47:A8:3F:14:69:8A:BE:05:4A:66:DD:ED
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 0198D65FE1B278345A37B685ABA8D7FAE637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0CF5
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: 40tCCuCX+riv2T7HE3KmlfPa4f4NeiBJpRCBlcsRvrE=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e1:b2:78:34:5a:37:b6:85:ab:a8:d7:fa:e6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=50b6780a439d1f1647a83f14698abe054a66dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:57:6a:33:89:9f:8c:77:29:86:96:b9:de:
e2:6a:17:cf:08:15:b0:05:29:03:df:96:4b:48:57:
bb:73:fe:49:19:d7:99:55:32:30:05:30:bc:9a:29:
a7:45:f6:26:1d:71:23:cd:12:5c:05:fd:38:7a:f7:
aa:d1:d5:67:9b:59:6a:48:ac:f8:56:75:b2:c8:e6:
d9:ea:e1:cd:ee:6a:22:3b:77:c7:10:6a:62:4a:cd:
3b:64:11:f3:51:90:5e:3a:d2:b2:f8:89:c6:ea:ae:
47:98:e2:60:05:c6:42:94:a4:2f:f0:09:ea:f8:69:
00:3f:0b:5e:85:be:a7:72:49:94:a0:34:cc:37:44:
f5:ee:d7:75:49:db:6f:56:38:44:41:3f:a8:4e:92:
89:f2:66:81:4f:68:6f:98:75:0c:f4:16:69:c2:3d:
05:a4:bb:78:47:3a:1c:4e:e6:04:90:46:a2:4b:08:
79:5d:36:42:d3:23:da:94:c5:4d:40:78:a9:b5:92:
20:b6:e8:0f:79:46:d0:1a:62:34:e3:00:c9:20:45:
fd:9c:38:59:2f:29:d2:ad:94:20:2a:4f:76:0a:1f:
39:96:c1:84:23:65:14:86:4e:6f:2a:0a:62:02:50:
a8:4d:e1:c7:f9:67:02:af:e8:e6:1a:89:4f:f9:f2:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B6:78:0A:43:9D:1F:16:47:A8:3F:14:69:8A:BE:05:4A:66:DD:ED
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:b4:3a:f4:bb:26:66:9c:00:8b:aa:01:c6:52:15:3d:0e:
0d:3b:c1:7a:1d:07:c8:fd:9a:cf:05:7b:10:4c:f3:b9:67:f2:
d7:05:5a:cd:38:7e:fa:94:87:e5:16:5a:45:7c:df:a7:0c:e3:
7f:00:d1:6b:f3:5d:d2:74:32:96:fe:54:a0:96:93:1d:9c:62:
d4:92:0b:96:b6:84:1d:14:11:7c:31:56:dd:99:fe:37:7c:d7:
42:08:03:62:12:0e:18:24:f1:93:0c:15:df:ea:bb:2b:70:cf:
db:52:4b:fd:81:55:b6:5b:0b:8b:4f:57:15:93:21:77:43:ad:
f7:3d:aa:8d:18:62:76:fe:6e:a7:89:be:a9:a5:89:aa:6e:9d:
49:f2:68:06:a9:e7:09:da:89:e5:39:3c:be:9c:cf:71:33:22:
83:c3:98:0d:60:aa:21:a6:06:c6:25:e2:a9:3f:69:a9:10:c6:
84:ac:2d:39:da:a8:3e:37:9d:fd:7f:70:88:64:eb:9f:e2:82:
d5:71:92:a0:44:72:21:ef:6e:a4:a4:c4:17:68:b1:94:ad:ce:
3a:7d:cc:e9:ac:56:4c:04:9b:32:09:d9:02:14:6a:e7:e9:db:
7d:d0:36:48:48:b3:76:ab:e8:ca:f1:e5:0d:f7:18:97:e9:3c:
f6:8d:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:02 2025 by rpki-client