Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: b7Za6owS850lT9OMkaU+BbgBzkStUE3PyiF7/7hHpGg=
Subject key identifier: 08:A3:53:AD:EB:07:92:81:FF:C5:D6:E0:DF:DA:8E:96:4C:07:46:90
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 0198D515DA26E4BA386215C3C0D96D660A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: kErYWf/WbRS2hPHwFMjyiPSVZIY2Y9McmsiQMtXdf2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:da:26:e4:ba:38:62:15:c3:c0:d9:6d:66:0a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=08a353adeb079281ffc5d6e0dfda8e964c074690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:ec:22:10:2b:bb:a8:60:37:6e:f0:87:53:
4f:1f:26:6a:87:95:a4:da:dd:25:e1:0a:63:06:f7:
17:79:d2:60:52:4c:25:75:71:ea:94:b4:16:2f:87:
68:f4:3b:50:b0:a9:7b:59:5b:20:6f:f7:2a:c9:d5:
cb:76:ca:59:10:e6:dc:39:bc:72:25:9c:f4:29:99:
c9:c7:2f:3a:e8:05:ff:a9:5e:0b:92:3c:fd:b0:0c:
04:66:69:fe:4d:64:ed:49:c1:2c:a2:5d:ef:d9:db:
93:c4:6e:47:24:e3:92:89:c3:59:ed:68:eb:8b:ac:
24:a8:41:30:21:d4:0e:5a:73:19:84:a1:90:34:d0:
7f:32:62:be:79:b8:88:7b:30:4f:de:30:61:89:63:
fe:29:77:3d:6b:bd:5c:ff:e9:c0:2e:6e:bf:d9:fb:
a7:04:1a:74:20:dc:4b:60:16:f6:de:c5:ec:5e:16:
a4:38:73:a0:52:3d:c2:ef:ba:18:23:82:dc:09:76:
aa:06:90:f6:33:6f:ed:90:0b:85:74:f6:78:48:7b:
31:af:61:3f:02:31:e5:05:96:c3:3c:9b:9d:d5:07:
69:2d:e5:1a:3f:ff:e1:b2:64:66:14:af:f8:a6:c8:
7a:db:fe:d4:ed:af:05:90:42:98:3a:1f:2a:c5:ad:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:53:AD:EB:07:92:81:FF:C5:D6:E0:DF:DA:8E:96:4C:07:46:90
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:23:45:3d:5e:e7:80:92:1a:eb:73:02:4a:af:12:26:3c:05:
c7:4a:59:61:91:7a:c3:95:d0:8b:d0:a9:5b:be:9f:3d:70:33:
18:4f:07:c4:54:63:e1:3f:9d:84:4b:b1:67:c5:13:c8:62:e7:
d7:2a:1b:d1:de:10:69:74:c7:8e:b2:63:f1:a9:9f:e6:dd:60:
57:91:f4:81:a6:df:cc:e7:35:b5:f2:5d:86:e1:24:0b:9b:4b:
a1:98:37:7e:99:16:fe:2b:a4:5c:97:50:16:bb:05:d9:30:0f:
04:55:62:98:96:6f:fc:12:42:98:a3:f7:58:cc:72:3f:2f:46:
b3:e6:11:05:03:e4:9f:7b:a5:b8:21:17:d6:da:91:8e:54:fe:
ba:52:64:37:ce:13:8e:34:e8:a5:a4:86:15:f1:73:9f:b7:aa:
68:12:dd:c4:82:f0:06:cc:12:18:86:e9:76:21:fc:f1:77:e0:
22:10:8e:4c:ba:13:55:b7:f9:ca:3b:be:73:1d:cc:c2:85:c6:
bb:45:99:a1:e3:6e:66:c6:03:f3:fd:95:68:ef:36:1c:d2:1a:
fe:f0:c0:d3:cf:35:98:fd:8a:16:1c:9e:ca:ba:10:8b:0b:a2:
db:81:ec:7f:4c:b0:a2:44:2d:66:11:cf:3b:47:a8:6a:5e:20:
84:14:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:22 2025 by rpki-client