Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: a7G1Dnwmv40gvq+8Ya+ZRp26nM2qpOREiGN7FDgR2+Y=
Subject key identifier: 95:0D:AB:AD:BB:7E:C9:A0:4B:34:8B:7D:37:4C:FD:74:0D:6C:25:C9
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 0198D474645A37A9B8A4352324A3D88A53C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:14 +0000
Manifest this update: Sat 23 Aug 2025 01:04:14 +0000
Manifest next update: Sun 24 Aug 2025 01:04:14 +0000
Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: 7nbC4SoP4vg6pld5WOda0DxxGON2j+lUiWA0SqVqrVk=)
2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:64:5a:37:a9:b8:a4:35:23:24:a3:d8:8a:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Aug 23 01:04:14 2025 GMT
Not After : Aug 24 01:04:14 2025 GMT
Subject: CN=950dabadbb7ec9a04b348b7d374cfd740d6c25c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:79:92:45:15:47:cf:23:e7:a2:e5:35:f5:
b3:53:0b:24:c6:87:e4:06:bd:f9:70:87:cd:cd:be:
4a:12:bb:68:b4:6d:25:8f:52:89:d4:85:13:3a:79:
63:d1:55:35:dc:18:71:b4:13:14:93:34:a2:6b:0a:
3b:f9:36:28:69:b5:36:4d:07:bc:a3:c8:2d:aa:a0:
d0:b7:d3:c0:e1:e5:9a:b2:05:43:cf:18:f0:99:c7:
67:44:31:60:65:16:07:ba:9d:74:32:bc:69:85:86:
57:e5:ca:5d:60:42:d9:c4:9b:d8:12:be:61:8d:b7:
3a:47:94:1e:91:6f:a6:1e:fd:b6:d2:ec:cd:96:28:
b4:db:9b:11:aa:7e:57:b3:74:d3:72:c4:4b:ef:f2:
e6:1b:d2:a7:70:63:3c:36:0f:1c:f3:42:3f:cd:de:
5a:9b:61:e3:bb:56:e6:7b:12:c3:dd:ef:0a:c5:d6:
42:5f:ce:d0:8e:a8:04:15:42:ed:db:a6:55:3c:39:
62:db:0b:e4:34:71:ac:23:96:c5:47:5f:d2:24:1b:
a3:70:7b:09:bf:e5:f4:69:e0:ea:5e:a8:e4:4c:45:
58:2f:a1:c0:c0:13:cb:04:80:a7:8e:ec:60:16:52:
57:a1:89:ce:fd:6f:fb:c0:76:69:9c:a4:c3:0c:29:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:AB:AD:BB:7E:C9:A0:4B:34:8B:7D:37:4C:FD:74:0D:6C:25:C9
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:6b:ea:4d:b3:6d:95:5e:c5:ce:e7:47:4a:be:35:22:87:
6f:b4:13:80:b5:f0:95:e7:b2:69:44:fb:05:16:aa:fa:f0:75:
bc:1d:0a:8d:be:0f:ff:2b:58:4f:54:43:ea:b2:16:0c:50:1a:
18:28:73:22:e3:7a:7f:63:4e:8f:3a:71:f1:4d:af:1e:73:fc:
17:5d:f5:69:26:30:26:11:9d:ab:4d:0d:ac:51:9b:9f:0a:63:
36:3c:25:69:42:8c:5c:2d:0b:b8:44:9f:08:62:ea:c2:b0:9a:
44:a8:88:88:6a:c6:38:09:b7:80:d3:a0:e9:d1:5c:7f:18:82:
5d:cd:89:35:f6:28:5e:0e:c0:36:53:54:aa:47:a8:19:00:e1:
e3:45:b3:f4:fe:76:3b:f7:02:18:88:64:e0:26:73:ea:e9:a6:
ae:f1:d5:fd:21:e6:72:aa:29:d8:74:a8:c3:ba:f8:79:72:96:
37:e2:67:7e:2a:5b:ac:19:cd:d0:e8:b0:3f:bd:96:81:52:88:
44:cf:87:bc:6f:b3:cc:3e:ff:9f:4a:3c:08:60:cb:cd:b1:ac:
90:0e:f5:12:4d:fc:ce:4c:a5:92:d6:d2:81:2d:b8:07:69:36:
0e:64:c1:54:3d:f4:9c:4f:d1:11:c3:7e:a2:9c:be:ac:1c:1b:
ec:bc:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:16 2025 by rpki-client