Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: Jo3Qm3O3pmHOI4ckpUp4G0MxXTHfHu5jSXyWppdBzGA=
Subject key identifier: 07:3D:42:48:04:F9:EE:7E:8F:24:B0:28:F8:10:65:09:EE:CF:B9:7B
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0198D6CD0886597E4577D7AE2876A4ABC053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1346
Signing time: Sat 23 Aug 2025 12:00:17 +0000
Manifest this update: Sat 23 Aug 2025 12:00:17 +0000
Manifest next update: Sun 24 Aug 2025 12:00:17 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: 2kFsMxeFbG5Pc3pdulooCYFpj8wiw6UJoXhAjki1IuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:08:86:59:7e:45:77:d7:ae:28:76:a4:ab:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Aug 23 12:00:17 2025 GMT
Not After : Aug 24 12:00:17 2025 GMT
Subject: CN=073d424804f9ee7e8f24b028f8106509eecfb97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:fe:d7:5a:72:14:ed:b6:b4:30:57:c4:92:
89:ed:69:23:ed:d4:1a:de:e4:85:c2:32:88:26:bc:
46:db:a1:4e:64:5f:f5:df:89:99:fa:5f:7b:0b:f2:
4c:5c:65:83:bb:4d:eb:a0:3e:56:06:b5:33:cb:83:
52:cb:a7:cd:2b:76:de:48:c4:2c:a8:af:36:40:b7:
ee:5d:8a:67:b1:93:99:bd:a3:dc:22:65:b0:d4:49:
84:11:4a:17:86:74:10:52:7d:ff:3d:28:ab:41:a6:
c2:ed:10:ee:57:43:4a:e4:e0:44:47:8f:34:96:23:
bc:9f:bd:9c:3f:df:60:65:26:2a:3e:ce:34:a5:0c:
a4:bb:54:d0:44:92:b7:89:c8:3b:54:79:dd:33:8a:
7b:af:fa:11:0d:63:d8:23:ba:5a:89:b3:c6:4c:36:
02:43:af:2b:fb:f3:38:c7:35:5a:8e:f8:bd:a3:55:
52:56:5d:15:33:67:a0:cc:6c:f2:4a:cb:b3:40:9e:
4e:62:a6:57:c3:a7:b9:08:dc:7a:cf:27:58:98:27:
98:e8:d7:47:f0:2e:d6:91:16:ee:ac:b9:80:5c:77:
51:53:7d:80:4a:60:e4:aa:0f:89:08:9f:6f:91:b8:
74:09:fb:a8:34:a3:bc:3a:28:7f:79:41:23:d4:89:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:42:48:04:F9:EE:7E:8F:24:B0:28:F8:10:65:09:EE:CF:B9:7B
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:e2:74:4e:77:ec:4f:6c:ba:a7:cc:91:7f:39:7e:5f:52:
8c:7b:44:59:7f:20:27:ee:09:e5:2a:1f:ee:f3:ac:ed:95:2f:
f3:11:72:af:9b:6d:26:c3:5f:b6:aa:8b:52:77:8b:63:4f:25:
a9:7d:af:a0:e8:15:cf:d8:05:09:d9:2f:40:00:7f:a1:68:f6:
32:4f:50:93:31:9f:44:d0:5d:e9:fc:7f:de:69:32:8b:e0:c3:
18:aa:91:aa:a3:1f:c3:96:fe:f8:c4:29:13:b0:98:a5:15:ea:
27:c5:0e:1e:f5:7d:2a:a5:1c:6d:a0:78:dd:c3:f3:d3:af:49:
ce:91:ad:36:f1:44:d2:d1:52:c3:7e:2e:17:8b:fd:b5:d4:d2:
63:06:68:a3:02:a0:e3:c1:52:9d:10:7d:f0:38:af:6c:76:e5:
12:73:dc:e6:a8:05:51:88:16:87:0b:c0:b0:6e:75:fc:30:36:
bf:e7:09:ee:4b:38:8a:10:59:44:4d:b9:e7:9d:f6:01:dc:76:
81:10:8b:3e:57:2f:26:f1:dd:9d:d1:9a:aa:e0:29:fb:dd:c6:
37:ac:41:87:99:c4:3e:24:90:fb:f0:1b:a8:13:1c:01:2f:56:
17:04:42:bc:26:c2:dc:ae:00:be:c0:4f:0a:db:76:0c:41:fa:
28:cb:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:56 2025 by rpki-client