Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: D0eRiznexudCa7vQwXw9JZoPwyp5q0bIQ8vlpnr687I=
Subject key identifier: D5:39:52:F6:37:44:6E:FD:90:E8:85:44:4D:9A:1E:3E:67:B1:52:FC
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0198D54DF508B4B116AFC27B8D6DCCD8B2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0EFF
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: G7edY/+GlG5dTMkkvb0m/VP8zYxhD2OLWnsBVujjVqQ=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f5:08:b4:b1:16:af:c2:7b:8d:6d:cc:d8:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=d53952f637446efd90e885444d9a1e3e67b152fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:00:28:d7:49:c2:1d:26:0e:5c:de:1f:03:
02:fd:02:36:1d:70:81:ce:ad:96:f6:4b:75:7a:24:
ba:5e:ba:cc:e6:c7:53:9a:6a:1c:a4:c3:9e:c2:7d:
c5:1f:f0:05:1f:45:66:9f:30:e2:71:f5:b5:50:10:
6b:5c:79:0e:25:7c:74:c6:b2:9a:45:4e:5d:3d:3e:
f7:45:85:00:7b:c6:39:58:85:42:96:50:82:7e:da:
c2:ce:8e:56:a9:91:9e:2e:be:7d:23:6e:01:4d:b5:
3a:c1:af:f8:0f:8d:03:77:12:7f:bd:af:c5:6d:5e:
f2:93:c8:b1:69:90:71:36:6f:69:40:34:21:d2:a5:
91:5f:fd:b2:69:52:f8:bb:b5:92:47:cf:71:e0:00:
c8:ce:47:52:3b:0c:c1:3d:52:f9:1e:82:81:32:ae:
2c:5e:15:e1:4d:37:50:31:36:71:da:fa:d1:79:69:
7b:d9:21:3c:dc:47:92:1e:13:f8:9b:08:f8:64:03:
8c:26:cd:84:08:5a:ff:12:c7:ea:26:1b:43:dd:a3:
dd:c7:df:2c:dd:2a:9b:7c:0f:75:8a:69:13:e1:2a:
47:1f:8e:d3:57:9f:5c:62:b1:3e:31:12:fa:a4:a0:
92:43:46:d8:c9:83:fb:fa:e6:3b:89:c9:a4:59:a0:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:52:F6:37:44:6E:FD:90:E8:85:44:4D:9A:1E:3E:67:B1:52:FC
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cb:94:34:41:7b:48:26:ca:6e:83:55:a0:cd:0f:ef:8c:42:
54:6e:d5:ee:e1:0c:86:17:7b:05:56:df:c9:47:e1:42:b6:a9:
66:34:6d:cb:8b:bb:91:d1:49:e7:f8:01:2a:ab:4d:31:7b:6a:
25:bc:7e:2c:2d:84:0f:51:fb:e0:70:45:ab:6d:14:83:b2:e3:
97:52:6a:03:e4:b2:19:5e:47:5d:86:b7:45:38:56:04:b2:57:
24:45:b0:3d:7f:7c:e3:6d:9d:bf:fa:7c:d1:1a:10:11:80:ed:
e0:f9:09:1c:a2:8f:78:69:38:9f:2c:02:de:26:17:28:c8:7f:
28:16:b5:d7:2c:55:21:04:08:cb:0d:05:6d:16:68:a8:42:84:
42:a3:f9:98:25:29:4d:a4:38:fc:83:f1:4e:2f:9f:23:74:6a:
94:c8:e9:34:c2:94:19:a7:c3:21:bb:a5:bf:77:2e:b7:03:cc:
1b:52:9a:ba:98:90:92:e8:53:e0:8a:55:f9:1a:fe:aa:ae:63:
21:7f:cc:b1:73:4d:f9:45:81:d6:45:2d:0d:0b:13:8b:a1:bc:
dd:fe:3f:cf:f3:a5:75:41:96:e1:69:b2:ac:bf:f8:f5:9d:9d:
de:76:49:09:44:a7:f0:e8:1b:d7:e0:50:ed:1d:b9:53:e5:de:
75:63:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:06 2025 by rpki-client