Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: V6ZKyvxvg6ttG5YLQnYf65LqIQVMY6vsFcaPR2JHwo8=
Subject key identifier: AB:A2:D6:BE:6F:5B:8E:F7:3E:F7:D5:75:16:9B:D1:F5:DE:4B:63:D2
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 01988166EB34DEE884ED4083EDDD8B412785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 0334
Signing time: Wed 06 Aug 2025 22:01:02 +0000
Manifest this update: Wed 06 Aug 2025 22:01:02 +0000
Manifest next update: Thu 07 Aug 2025 22:01:02 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: GV3sd0/eWIiIdTXXVfZTdiceOS0hh8n8/8XsaBybkbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:eb:34:de:e8:84:ed:40:83:ed:dd:8b:41:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Aug 6 22:01:02 2025 GMT
Not After : Aug 7 22:01:02 2025 GMT
Subject: CN=aba2d6be6f5b8ef73ef7d575169bd1f5de4b63d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:9c:f1:1d:79:4f:e2:87:4d:ce:1b:2d:a3:
e6:34:63:7e:eb:59:9b:26:66:85:f3:2a:16:0e:bc:
8a:3a:4b:cc:d2:e0:a5:43:a4:39:65:d9:c1:cf:79:
48:6a:b6:fd:b1:4e:db:07:58:5a:3e:85:89:0f:2a:
97:40:0c:50:c1:23:99:67:0c:51:52:23:da:16:0c:
af:93:14:6c:14:69:66:54:63:e7:92:5b:d8:3e:1e:
df:01:9e:f0:13:bd:90:3f:d7:2c:c5:33:7d:e7:66:
60:c2:3f:40:ac:82:a6:08:0a:0f:94:8a:f1:94:57:
2f:fd:16:e1:83:90:6d:be:91:78:b9:f2:02:b3:01:
1f:7b:6a:19:9c:85:82:89:27:16:ce:f3:83:c2:59:
1d:a6:4d:39:f9:dc:39:1d:1f:f9:9d:b1:3b:f9:aa:
84:8e:b6:d6:85:89:7e:63:67:ab:47:88:9e:73:cc:
1b:10:df:8d:b3:dc:f2:00:4a:fc:0e:54:7a:2e:7b:
ae:2e:5f:af:e7:bf:28:a9:20:6f:9f:6e:42:6e:34:
6c:33:8c:20:08:fd:a7:7d:9a:e3:04:bb:99:44:2d:
cd:f6:12:4a:a9:22:0d:df:27:09:7e:14:98:33:f1:
22:62:7f:74:5c:a7:bf:5c:2c:9c:9c:38:e4:7c:ef:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:D6:BE:6F:5B:8E:F7:3E:F7:D5:75:16:9B:D1:F5:DE:4B:63:D2
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:2e:fe:d7:a3:5a:cb:1c:a9:04:14:c6:2c:ef:71:8a:50:
f4:f1:75:62:62:f1:31:7c:af:1f:8c:1e:e4:8f:4a:46:1d:1a:
55:05:c3:a1:72:23:f2:38:b7:87:2c:4e:79:55:88:27:43:19:
ba:d0:88:16:7e:7a:7f:cd:87:86:90:1a:2e:5d:16:d3:e8:49:
34:0a:e7:b2:bd:1c:0e:bb:bd:da:c5:b8:8b:b3:a9:b0:13:d2:
d7:3c:1a:6b:c6:4e:3a:1e:d4:6e:6d:b8:a9:42:57:46:c5:4f:
ee:6b:99:73:32:c1:10:e4:a6:10:65:5d:1b:5d:d1:df:c0:37:
25:f8:98:19:ac:14:fd:c5:f0:22:fe:47:d5:e8:53:c7:3c:df:
19:3c:54:b9:3c:35:a4:d8:0b:da:a4:23:34:e4:05:ab:4e:92:
af:bb:81:0d:8f:c8:e4:54:5a:b3:52:26:45:24:4f:c4:2b:6d:
9c:b1:a7:10:58:da:20:1b:f8:2e:f8:b3:63:42:96:22:20:10:
f5:84:62:85:71:64:d1:51:e2:a1:2a:c3:3a:2a:af:f2:12:f6:
eb:0f:ad:15:c0:d0:3c:e2:9a:ff:fc:64:3d:e8:7d:0c:a1:1e:
f3:69:b1:02:70:04:b2:7f:c4:8a:c0:56:6b:b7:54:a1:21:fc:
f3:99:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:13 2025 by rpki-client