Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: AE01DMpW+/5fPJiYU7iLGTloDPwKwHkpwOQ/6w4iWT0=
Subject key identifier: 98:9B:DB:49:6E:50:4C:88:03:D4:E8:CC:88:CF:6A:F9:90:07:1F:DF
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 0198D5160161774EF38C42C2E949A21F275B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0D28
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: G2qkkd3Jds8UHxnPQWrv2bfxh+7pa/25HVZYUuqjHPI=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:01:61:77:4e:f3:8c:42:c2:e9:49:a2:1f:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=989bdb496e504c8803d4e8cc88cf6af990071fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:0a:d3:1d:8a:ef:5c:70:16:1c:02:a1:f5:
d4:71:d9:64:c8:d9:8d:06:70:7f:3c:30:66:c2:3e:
dc:59:1a:ae:0c:29:5b:68:37:76:30:be:5d:c4:ad:
04:dd:45:66:45:32:dc:60:a7:30:dd:ff:65:6d:55:
b1:76:f6:be:8c:bf:a8:5f:55:7c:74:90:0e:00:82:
6c:9a:23:68:ac:7c:28:82:15:53:b9:99:cb:16:19:
a3:7b:33:38:0e:bb:ff:bd:fb:b5:eb:f4:da:d1:4c:
bf:fe:5f:3e:cb:eb:f6:45:de:9e:78:8b:55:b7:b3:
89:76:47:f8:7c:02:ed:02:7d:a9:e5:0c:16:c1:bf:
a3:c9:2c:88:29:97:c4:18:7c:45:65:7f:7b:9e:c8:
90:39:9b:9b:f3:1c:65:53:88:da:49:42:2c:a7:41:
1e:d6:2c:5e:09:8a:de:aa:67:c5:02:cf:65:b9:1a:
6d:f8:ea:49:59:2b:51:dd:d1:5c:a3:5b:a7:20:0e:
96:de:6b:7b:74:99:83:24:87:3b:20:26:66:f6:96:
9c:be:47:b8:20:de:b4:42:3d:33:21:a5:db:a5:42:
2c:51:57:45:39:bb:ad:48:84:ab:86:85:21:72:d1:
6e:82:82:4b:40:a4:ef:e3:81:39:9b:e3:76:59:d1:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:DB:49:6E:50:4C:88:03:D4:E8:CC:88:CF:6A:F9:90:07:1F:DF
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1a:0e:a0:3c:12:fc:28:a0:ed:f9:8b:5c:f6:1f:39:99:6e:
36:c8:7a:5e:ab:66:c7:db:07:03:52:a1:03:e0:03:b1:17:86:
d4:91:7e:a9:b7:48:31:4d:47:f5:ef:72:5b:d3:9d:76:a5:fc:
15:3c:ad:c8:90:40:13:9e:33:cc:e6:5f:49:de:7f:6b:0f:9c:
23:20:42:6a:dd:e8:c4:c0:a2:cd:92:b1:a2:98:71:21:35:68:
ef:b1:af:82:c5:68:47:e5:35:0e:23:ba:70:e9:b4:84:a2:10:
a8:2a:ba:b8:74:40:d7:7c:f0:cd:47:11:8c:a7:24:bd:a7:fd:
c4:7f:10:2f:68:56:3d:5b:e0:4f:20:02:76:f7:24:24:c3:86:
2e:81:b9:08:5a:c9:5e:6f:2f:6d:40:d1:2f:01:3c:e3:73:51:
a8:d9:69:9d:4f:c3:0b:fb:fd:47:59:d7:af:c8:c8:c4:da:35:
aa:28:9a:30:75:9d:84:da:aa:2f:6e:4f:85:19:9a:94:8e:ab:
ce:03:b3:79:a7:0d:c6:6f:2c:35:61:a4:b8:d1:df:ce:26:23:
df:6f:86:2f:2b:8c:22:af:c6:b3:ba:50:34:57:f2:27:e0:16:
e4:60:6b:64:66:89:33:27:34:c3:fc:16:78:59:18:93:88:69:
1e:b5:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:49 2025 by rpki-client