Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: UKf78pg8Vjg7dLGvLnH7IBIswrW8qFhrc1GfU/Biib0=
Subject key identifier: 8F:89:50:98:D6:93:C7:51:22:4B:CA:8C:8A:2C:31:3B:68:6C:26:D8
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0198789A57E3B5DB5BBD081A94879EF9DCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 05:00:37 +0000
Manifest this update: Tue 05 Aug 2025 05:00:37 +0000
Manifest next update: Wed 06 Aug 2025 05:00:37 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: fAy22jyDln/uCSURH45WgUBxuVoq3CUtLxn7FfApv74=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:9a:57:e3:b5:db:5b:bd:08:1a:94:87:9e:f9:dc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Aug 5 05:00:37 2025 GMT
Not After : Aug 6 05:00:37 2025 GMT
Subject: CN=8f895098d693c751224bca8c8a2c313b686c26d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:32:84:4d:a5:7f:40:54:ee:bf:1e:f1:b1:
e5:2e:7e:05:49:40:61:2f:c9:c7:2d:69:78:58:a7:
54:a8:10:79:44:b3:08:8e:af:9a:7f:b5:db:f6:13:
c2:ef:f7:ad:ea:10:f7:e8:93:45:1f:d1:fa:f5:c6:
51:fe:10:26:28:47:e2:6d:87:b8:ad:e8:35:dd:3c:
96:2b:83:25:0c:47:ca:80:bf:bb:70:89:9e:c1:0e:
58:ec:93:22:45:20:f0:85:b4:16:2f:84:05:ea:90:
48:dc:2c:ba:38:be:66:e9:bf:0c:88:65:3b:b7:45:
1f:97:86:af:a6:63:06:12:52:48:5b:34:08:f0:47:
99:48:2f:cf:b5:97:0e:16:45:0e:d2:d8:0c:a5:88:
06:17:ea:63:69:a7:39:59:67:5d:88:37:95:72:86:
58:1e:37:4f:fd:d3:ee:84:79:ca:62:8e:cc:85:c5:
ca:8a:bd:bf:b1:89:c7:e5:6f:91:81:42:5b:a2:ec:
82:02:37:21:fe:18:65:9f:e0:0c:f9:e9:59:f9:f1:
be:9c:5c:0b:26:c7:83:02:e7:59:86:30:c3:4d:ea:
b4:0b:6d:09:01:52:97:f9:9d:b7:d6:57:70:d4:bf:
28:75:36:4b:79:67:cb:b5:f9:fd:04:fe:f6:6c:4c:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:50:98:D6:93:C7:51:22:4B:CA:8C:8A:2C:31:3B:68:6C:26:D8
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ff:ab:c9:74:8a:5f:2f:d9:37:00:56:5c:2f:7c:22:2b:50:
51:3c:ff:a0:4e:c6:f0:f8:aa:40:ff:19:f6:fd:64:64:ad:20:
8a:eb:6e:03:6a:0a:f5:34:bb:49:99:dc:4b:d8:c7:5d:ae:a7:
a4:59:28:bb:8c:90:af:80:f6:fe:fc:6e:8d:08:c9:3d:27:25:
98:b1:61:b1:25:13:6f:39:28:a8:9f:7a:c5:30:37:ac:ae:1b:
9d:ae:65:1a:a7:93:a2:cd:73:8d:25:2d:21:e3:62:04:54:ca:
29:71:6e:fe:9c:44:62:c7:7b:60:dd:7b:09:ad:fd:23:e3:39:
8f:2a:79:15:66:0e:a0:8f:f7:91:f7:72:de:15:c7:d4:a2:72:
c1:b9:36:3c:76:c2:a9:8a:88:b8:3d:b8:d2:ca:7c:da:59:d8:
1f:2b:ce:84:30:45:b6:d7:43:28:3a:08:7a:7c:ca:67:14:aa:
81:9b:c9:17:a1:6e:90:db:6a:af:25:67:7d:79:57:13:16:65:
28:54:e1:5f:8f:b9:61:14:59:5c:49:52:70:88:ec:e8:07:20:
a5:4c:e8:17:ff:12:fc:c5:76:e5:94:cb:84:64:f0:50:9f:20:
15:b9:9b:4b:d6:2f:76:50:98:c2:5b:a9:85:fa:2b:2b:7f:f1:
ec:e9:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:22:50 2025 by rpki-client