Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: ya2rvWN9N0lxqybHT6XowBHH0c6SQf0ccSsOpJ65kPo=
Subject key identifier: D8:E2:F1:DD:23:59:9F:2F:29:2A:F6:0E:7F:39:AD:C1:FC:0F:95:C4
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 0198D472E6A38B1B9BE300C085F69BFA4CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 165C
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: Q6T8MWccWfBmuTVnly2oFL1pOGlbfKD87TCTuSVtf9Q=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e6:a3:8b:1b:9b:e3:00:c0:85:f6:9b:fa:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=d8e2f1dd23599f2f292af60e7f39adc1fc0f95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:cb:d5:9b:02:f2:0a:11:83:95:b9:19:bc:
17:6d:11:e6:b3:bc:93:68:1d:19:23:4b:a8:28:66:
b9:61:79:f3:2e:66:77:b9:90:a8:85:57:4e:bd:e9:
30:e0:5f:25:16:b2:4c:e4:05:e1:06:1f:b8:49:53:
3e:b7:81:1b:0c:af:70:bb:d1:b0:62:1c:e9:2e:fb:
c4:06:b5:09:f0:49:d9:63:f1:e4:ac:49:6e:35:4e:
59:81:7b:34:c0:7b:74:f4:79:05:d0:9f:cd:62:1e:
04:98:cc:8a:1e:5e:ec:33:78:70:a4:41:1d:21:79:
ac:64:ec:5f:97:e5:8e:c7:ca:2f:b6:2d:91:81:05:
f3:d2:69:1f:bf:d4:f4:20:e3:75:e6:14:a9:06:74:
f0:bd:b2:8d:8f:2e:fd:98:96:41:a5:38:2f:d6:69:
02:b9:54:1f:98:03:e3:7c:87:6c:be:1a:a7:22:78:
01:0e:4e:1b:59:36:bf:08:8e:7b:e3:4a:3f:86:12:
1b:83:fb:ff:69:44:15:e2:8f:e4:b3:10:04:27:77:
31:1b:45:18:6b:3c:03:f4:6b:72:a1:9f:e1:34:ff:
ca:c0:f2:03:2e:98:c3:2a:b5:22:b0:ca:aa:a2:d5:
0d:ce:7a:a2:72:90:5b:ef:60:16:1a:c2:53:5b:05:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:F1:DD:23:59:9F:2F:29:2A:F6:0E:7F:39:AD:C1:FC:0F:95:C4
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:2b:4b:72:31:c2:c8:e8:e2:36:43:91:15:86:ac:06:8e:
19:7b:b9:ef:1b:b1:2f:3e:c8:8a:ee:36:53:56:bd:93:1e:f6:
2c:aa:15:14:f7:ab:59:67:11:3b:1e:8f:43:13:d2:14:07:7a:
da:64:f0:6b:e5:46:30:73:c1:e9:91:da:14:0f:f1:d3:41:a3:
a3:81:53:22:fd:c9:96:65:af:a8:25:e9:4a:f3:0b:d0:da:a2:
9c:1c:80:9b:28:0b:23:2b:45:91:8e:29:e8:9a:37:71:02:62:
39:de:1c:bc:77:4e:45:69:e4:af:bb:94:6e:c8:b1:1b:6a:69:
4d:e9:0a:67:a5:41:58:0d:04:38:2a:65:ca:a3:7c:e2:d7:a5:
e0:85:cf:4d:d4:07:e0:dc:e0:ab:7b:8b:1b:72:f1:67:b5:52:
7b:ff:88:a6:6f:21:7a:fa:88:3b:e1:9e:56:3f:88:33:55:dd:
80:c8:84:b9:7c:dd:5e:af:ec:28:3a:47:28:93:de:44:54:d5:
65:ad:6d:af:e2:0b:c1:65:6b:99:5a:5d:10:fc:62:72:56:7a:
d9:bf:2c:5e:f8:32:ee:9d:cc:50:fc:57:69:29:4a:49:1a:37:
65:40:10:56:ba:ba:df:da:24:2f:9f:6a:40:cd:0c:11:32:2b:
52:d2:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:05 2025 by rpki-client