Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: YFgbHf4aIi5+p6B2URzeZ1CmEJvRhicf6qbi3fAM+2I=
Subject key identifier: 53:FB:36:E2:B8:69:FB:65:AF:4A:27:CA:6D:B7:07:30:5C:22:DA:5A
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0198D6CD11A8729B4E79B571B57E6899323B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 13ED
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: xO1Gg2RU3giA8V4Tv196+l2ewfMW4dOwsnVBtYT4FAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:11:a8:72:9b:4e:79:b5:71:b5:7e:68:99:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=53fb36e2b869fb65af4a27ca6db707305c22da5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:99:84:4e:c4:fd:4d:80:15:a8:ed:8e:b9:
9f:d7:2d:93:8a:1c:c4:e3:25:6e:b7:88:9a:69:ee:
7e:43:1f:2a:f0:cb:f1:d2:22:8e:47:ca:97:69:ea:
a7:21:06:44:d8:25:34:6f:e6:41:eb:8c:6a:f9:d2:
7d:aa:7f:47:6b:26:32:4d:ec:0c:d7:fa:74:54:b0:
ae:db:a6:77:aa:88:a6:af:ff:9b:f8:de:d6:41:ae:
d9:ce:30:b0:ee:04:18:ab:9e:30:a9:eb:42:50:c6:
42:2f:ee:f9:7a:4c:b1:e7:04:e2:da:8c:b8:a6:7a:
09:3a:40:ed:e0:7e:6e:ff:e3:1a:a2:da:6e:c4:1d:
5d:bf:0c:76:99:9c:45:0d:fc:58:03:a6:db:37:b4:
20:83:1b:6a:50:24:53:07:0a:b7:33:c7:be:da:03:
cc:08:96:c9:3a:74:b5:41:a2:29:71:06:b0:99:4c:
09:51:4d:d3:20:44:36:fa:d2:73:74:b6:61:4e:2f:
37:66:98:50:af:47:dc:1e:09:9d:44:00:e0:ce:81:
32:fc:3d:c4:b4:b7:cc:f7:76:bc:2c:34:e7:8d:9b:
80:00:b4:77:e4:08:3b:ec:ae:97:61:b8:f6:08:5c:
dc:c3:98:61:a3:b1:ca:28:00:ac:9b:d9:aa:6b:e5:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:36:E2:B8:69:FB:65:AF:4A:27:CA:6D:B7:07:30:5C:22:DA:5A
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:59:7e:0e:5e:fb:05:5b:5c:12:e8:d3:fb:c6:b4:f7:11:44:
ba:64:9e:00:0e:65:29:6f:8d:25:6d:7f:bc:82:bc:08:db:54:
ea:4e:cc:20:86:aa:51:ac:0a:8e:e1:18:bd:57:a6:4a:f8:d0:
b4:52:44:2f:e1:03:14:a6:34:7d:c3:8a:91:18:f6:14:ef:4a:
b5:d0:a1:47:dd:05:de:1e:0b:ec:89:3d:68:a5:7d:7a:3c:17:
24:11:68:87:e6:62:b0:89:0e:f8:b3:b9:1f:d0:74:d7:9e:87:
25:4c:96:f4:37:88:87:6e:c2:d4:d1:4d:d1:2d:71:42:15:f2:
8e:a4:e8:ee:90:1c:ec:47:2a:a4:df:27:28:b6:7e:43:30:59:
c1:86:bc:37:a8:9e:57:50:ec:16:03:43:a5:12:ce:a3:91:6b:
cb:60:ec:d2:16:05:3e:43:fe:4b:f0:9a:96:be:68:1e:87:b7:
18:6f:db:5d:e9:12:a9:12:ea:5d:4e:70:1c:c4:2c:78:ed:8a:
23:24:fd:f2:51:99:9b:3f:df:4f:a5:5f:39:8b:85:54:f9:6d:
21:18:5a:d9:00:46:35:c6:00:a7:3e:45:da:bd:27:9e:16:0a:
f3:0f:11:e0:53:f0:6c:fb:33:dd:da:f7:0e:41:c1:cd:54:f7:
26:9b:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:10 2025 by rpki-client