Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: 7atUzfcYeq2rWiK2JQ1ZZBHtNodUgsrD1LS/HTBUUzg=
Subject key identifier: 3B:83:A8:2B:A2:14:34:93:01:62:F3:A2:DA:F7:3C:99:A3:A8:DF:00
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01988B0ECA756CE40769831FB3CA7A3BA241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1401
Signing time: Fri 08 Aug 2025 19:00:58 +0000
Manifest this update: Fri 08 Aug 2025 19:00:58 +0000
Manifest next update: Sat 09 Aug 2025 19:00:58 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 9X7MpDNtPMPZ396g3/57kahZ5pSLYYMZLDRQ8VEtlv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ca:75:6c:e4:07:69:83:1f:b3:ca:7a:3b:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Aug 8 19:00:58 2025 GMT
Not After : Aug 9 19:00:58 2025 GMT
Subject: CN=3b83a82ba21434930162f3a2daf73c99a3a8df00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:bc:83:cd:16:f7:3e:1a:3b:6f:dc:98:f6:
e7:ab:85:2e:3e:a7:aa:43:ce:b3:5f:f0:60:9d:10:
26:88:b1:35:23:bd:59:ef:c8:46:8d:6c:da:d0:dc:
fe:f9:9a:9d:80:3a:1e:02:d2:68:ff:75:0f:f7:8c:
c5:b4:78:af:72:da:42:9b:6a:9f:9b:0a:2c:82:0f:
34:6a:3d:8c:77:44:b6:ea:1f:21:3c:36:62:b3:de:
d6:b7:9f:c2:3d:b6:ba:8e:93:b6:0c:ec:0a:d4:c3:
5e:16:31:b3:86:be:ba:65:4a:2e:c8:82:b8:66:59:
b8:9e:ee:3e:1d:51:06:1f:af:2f:68:84:a7:09:df:
9b:fe:5b:7a:20:8a:20:f3:eb:1d:30:e2:4d:f7:ba:
e7:f7:af:85:6e:8c:e1:12:56:d6:9f:15:66:8d:0a:
35:1c:f2:26:a1:71:16:61:b5:68:e2:7a:47:5c:f3:
46:5f:cb:f7:a5:7b:00:20:7e:1e:aa:57:02:54:93:
c5:1e:8e:cb:ef:51:05:0a:8a:3c:01:67:6c:15:e2:
b7:16:99:7d:a6:fb:59:b2:12:9e:e1:11:62:03:4c:
4f:cf:81:44:e4:70:fb:bb:c7:80:c4:65:84:18:78:
7c:42:f2:e1:90:97:51:a8:93:91:1d:fe:b3:1d:b4:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:A8:2B:A2:14:34:93:01:62:F3:A2:DA:F7:3C:99:A3:A8:DF:00
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:b0:90:84:fc:2a:15:2c:1c:5f:a4:a9:b2:f9:d0:05:43:
cc:cb:4d:e9:3c:31:2c:66:92:03:d5:37:25:64:40:fb:58:01:
5f:84:09:12:b8:0d:37:3d:61:35:51:9a:ee:13:76:74:11:56:
fc:61:a5:03:5e:b7:35:36:4f:24:01:02:47:08:b2:f7:75:c0:
e3:88:b5:88:37:f0:be:1f:35:5c:d0:5d:95:1c:d6:db:c1:39:
81:b7:87:e8:19:bf:1d:eb:37:e9:21:ac:63:9a:ec:36:da:16:
ef:2c:81:15:44:e7:d9:a9:62:f4:0b:a8:bf:aa:82:1a:df:d6:
70:2d:e9:46:d3:47:05:3b:a5:b5:3e:a6:72:22:84:9c:aa:36:
88:d2:f1:41:76:09:8e:1f:4e:f3:53:59:61:4c:6e:c1:1b:9b:
35:3a:55:0a:08:c8:f4:6a:fb:e3:68:b2:32:19:4d:45:ff:08:
3c:e0:39:de:6b:d9:90:58:05:b4:f5:6f:df:10:17:cc:f3:fd:
66:b6:be:9a:ba:61:43:ee:cf:ce:f5:89:15:ae:a4:69:8e:8e:
53:7b:24:24:7b:8a:16:d1:0e:9e:a6:f6:10:52:0d:63:33:9d:
58:6d:72:3a:55:81:54:74:04:98:79:e3:40:a9:e7:4e:ea:8d:
77:44:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:21 2025 by rpki-client