Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: inmgOLXTQ/AYBJLfuX6pEl53l40PD71/3I23MW5h7b8=
Subject key identifier: 1D:8A:B9:8D:72:A2:90:B8:1E:AF:5E:60:0F:80:AD:17:A1:F4:FC:72
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 0198D6604D3766AFFFC7D07971927EC32DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 12E4
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: 4zQE+CNAfqyA0zvF7fF1iHZc70DrxtV0nW4T0Z6uM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:37:66:af:ff:c7:d0:79:71:92:7e:c3:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=1d8ab98d72a290b81eaf5e600f80ad17a1f4fc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:bb:49:db:a4:02:2c:7c:42:8e:f2:d6:ad:
de:c9:b2:b4:27:27:11:98:c0:8e:0c:62:bb:6d:68:
5a:95:bf:93:d5:64:d9:91:c9:1c:92:f5:51:a2:6d:
3d:d6:81:51:70:21:18:94:13:26:b9:ce:73:17:7e:
20:94:c6:73:20:13:0e:e8:91:9c:33:36:7b:10:43:
9d:a6:e3:78:ab:c9:91:84:7a:79:d3:33:6d:5a:93:
42:7e:cb:aa:0e:0f:79:4d:41:91:f2:fd:07:ef:26:
aa:c4:9e:09:f3:60:f0:a4:a7:6b:f4:c0:61:32:94:
0d:5d:51:f8:0e:1e:b6:41:d2:34:b4:de:c1:f2:2e:
32:c4:11:79:44:26:da:cc:02:e8:67:96:0a:57:26:
d5:71:29:63:c0:dc:68:45:a8:f0:f5:95:7f:0d:43:
0e:12:91:19:27:85:4a:05:1b:15:df:63:93:6b:e4:
a9:53:36:f8:1b:97:4e:ba:59:10:e4:0a:7e:9a:02:
2a:66:ea:fb:96:a9:ba:be:f6:a4:f9:0a:c6:e8:92:
da:e0:31:49:9d:63:61:64:67:ea:ac:50:2d:b9:7f:
ca:0a:08:09:8d:a1:a7:75:d8:9e:f3:a5:83:f9:8f:
70:61:5c:4a:2c:d5:5a:65:4f:04:bc:7d:82:56:61:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:B9:8D:72:A2:90:B8:1E:AF:5E:60:0F:80:AD:17:A1:F4:FC:72
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7c:6a:73:29:27:0a:8b:ca:ba:af:45:12:52:cb:39:47:77:
49:5d:80:65:8b:14:e4:f2:e5:01:1b:f5:90:46:45:14:6c:54:
03:36:38:8c:c0:8f:21:d7:90:1b:32:53:6e:d1:c5:e5:97:5a:
01:ca:d0:36:67:e9:30:c6:95:c6:de:ef:0d:5d:76:02:e9:f6:
97:42:e8:7e:c9:79:4a:1c:0d:71:ab:ae:69:ab:31:28:a2:f2:
7b:63:a9:22:12:b4:f2:6f:0c:82:3d:33:18:e0:91:32:27:7b:
7b:43:fe:fb:ad:af:43:96:65:34:1f:7a:09:2f:29:74:f4:cd:
f9:16:45:46:b7:99:53:05:96:76:09:58:5f:8a:33:13:af:50:
02:19:45:83:39:95:64:9d:15:fb:37:da:b8:29:34:88:28:f3:
3c:0f:57:c5:32:44:38:3a:0a:dc:82:fa:d1:52:e0:bb:75:ed:
29:30:c0:12:f8:b1:3d:e2:b3:69:78:c8:f1:83:0a:fd:fd:c8:
71:c1:42:a1:c3:34:32:84:7c:a9:e9:4c:96:50:5d:9c:67:ef:
84:1a:4f:82:e3:fe:b2:77:33:47:e1:cc:91:3d:a2:98:53:6d:
7a:f6:8b:c4:27:7a:24:b9:b6:70:c9:dd:50:42:2f:67:c8:05:
a4:96:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:10 2025 by rpki-client