Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: 6K2X5BO5uFquNpzgfzx8m9fMzSMYK6wv3yEWj+LOP2I=
Subject key identifier: 9D:E7:9A:36:24:CC:F6:15:48:69:55:E4:4F:1D:27:D0:7C:9D:43:53
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019892FF2AB2A7DF53E6EB7448651D2AB1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 130D
Signing time: Sun 10 Aug 2025 08:00:52 +0000
Manifest this update: Sun 10 Aug 2025 08:00:52 +0000
Manifest next update: Mon 11 Aug 2025 08:00:52 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: fYhOoxQWOeXUip85bGxJLZjOiKB3b6/cKTDzskQyq90=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:2a:b2:a7:df:53:e6:eb:74:48:65:1d:2a:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Aug 10 08:00:52 2025 GMT
Not After : Aug 11 08:00:52 2025 GMT
Subject: CN=9de79a3624ccf615486955e44f1d27d07c9d4353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:ff:29:d5:6e:fa:4d:f8:53:0a:91:ce:df:
66:c1:c1:fe:8d:1b:fb:0d:10:a0:63:eb:2e:5e:50:
ec:40:f4:c3:78:39:32:ea:62:69:03:47:4f:99:9a:
9e:75:f0:0c:0d:a6:75:1d:63:5f:4c:77:03:6f:5e:
d2:2f:02:9a:10:db:59:dc:d0:8b:9a:d4:4f:2a:d4:
99:30:13:c9:fb:e3:91:5c:c8:17:3c:c7:0c:e6:90:
1e:5e:15:eb:41:c8:8d:8c:41:a2:5a:10:af:35:21:
41:98:14:01:ab:62:6d:51:21:da:0d:9e:91:66:a9:
9f:b9:36:ea:e1:d7:0b:ef:54:97:1f:3c:cf:de:b3:
6a:1b:a2:ac:bc:e2:56:c2:e7:39:40:f9:af:5f:97:
0b:ab:3e:78:b5:97:78:80:32:14:9b:46:be:8a:c4:
1a:d6:a6:55:99:8f:d1:a1:c2:21:b5:bb:b2:6a:62:
71:16:8f:28:eb:be:45:c2:95:85:75:eb:6e:6e:95:
75:7e:db:4a:61:8c:0b:fd:a9:5b:36:b4:90:fb:11:
ea:0c:41:ee:d6:e2:31:ab:2b:06:6f:47:36:32:02:
a4:a4:6c:99:11:ae:3e:0b:41:ca:65:43:cf:fa:05:
e8:10:24:7d:91:a3:ac:fa:e1:7c:88:f7:99:ac:4a:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:9A:36:24:CC:F6:15:48:69:55:E4:4F:1D:27:D0:7C:9D:43:53
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:c3:f5:a3:00:59:ca:ad:1c:55:0f:d3:fc:87:e3:e6:c6:
49:f2:f9:4d:65:71:37:fa:e0:a6:63:4f:d2:d7:2e:51:00:09:
43:3c:4c:af:c2:da:f4:ab:1a:e7:21:96:82:3e:25:50:92:23:
d7:a9:97:71:cc:1c:42:86:69:4c:ab:32:63:83:8b:0c:0b:5f:
33:96:1e:b4:0f:3c:f2:40:64:1d:bf:a3:43:3a:d5:4c:8e:04:
44:c6:90:36:a3:b4:4d:8e:77:70:56:ea:8d:12:5f:1e:a6:1d:
13:cd:53:c2:ee:a0:7a:00:c5:08:d1:76:fc:7b:30:7f:14:b9:
c5:57:83:44:28:13:7b:66:39:dc:8c:fb:ce:e0:57:1e:fb:3e:
fd:a4:7e:15:22:d6:e1:0b:76:86:7b:05:3c:65:79:c0:bd:2a:
19:a0:83:08:30:ff:52:85:cf:ac:27:6f:0d:93:56:15:8a:73:
7b:06:2a:c8:1f:ec:12:3d:2b:fb:a3:cd:18:9c:44:a6:e5:19:
d2:45:1d:35:32:2f:e3:fd:11:20:64:f2:52:fa:92:0d:58:12:
b5:67:78:4d:23:73:5e:87:57:a7:72:d4:37:b8:92:60:d0:7c:
35:d0:cb:a5:b2:25:0b:95:60:c5:94:69:5b:6f:d5:89:5a:a6:
6f:c9:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:25 2025 by rpki-client