Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: ZpAcNnV7pG4klKryvvFWsvRhTEe1KrqbIOxKKBLX6S4=
Subject key identifier: 66:91:80:0F:4A:BC:28:0F:9F:4D:BF:28:43:19:FB:F2:B1:1A:30:A5
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01987FE6B42000DB2BCFD11ED7E099B3AACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0793
Signing time: Wed 06 Aug 2025 15:01:22 +0000
Manifest this update: Wed 06 Aug 2025 15:01:22 +0000
Manifest next update: Thu 07 Aug 2025 15:01:22 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: PzbDCsXCX3q3jevQbyMAZdrVLRevhJdTIysd/TTjzfk=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:b4:20:00:db:2b:cf:d1:1e:d7:e0:99:b3:aa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Aug 6 15:01:22 2025 GMT
Not After : Aug 7 15:01:22 2025 GMT
Subject: CN=6691800f4abc280f9f4dbf284319fbf2b11a30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:ce:02:98:e2:c8:c4:0d:89:05:61:8e:c5:
1c:f0:e1:1d:e8:39:62:fb:23:4e:59:ed:cb:3d:72:
40:8c:43:84:33:2c:d9:87:36:61:75:f7:60:77:f4:
e4:59:a8:72:a5:91:eb:d2:dc:a7:b7:a1:73:87:75:
d1:5b:57:7f:51:0a:de:e9:bd:c9:31:04:4a:11:23:
bb:49:17:26:04:d3:d1:3f:98:b5:11:da:47:4a:18:
98:ab:26:96:21:f9:55:6f:54:13:ef:66:96:10:eb:
9f:40:36:74:47:f1:ae:8c:61:0e:de:e1:cb:bf:b3:
e4:dc:29:24:00:d2:19:12:73:69:ba:80:3c:c4:da:
30:d7:cd:4b:bc:4a:59:80:d8:6d:85:c0:73:e4:f9:
42:43:67:43:cc:d6:75:90:08:6c:a6:4e:7f:8e:2c:
70:92:f8:cf:71:cb:0e:70:4e:a2:0e:16:a0:cc:6b:
f3:a2:ae:20:94:ab:f9:17:08:6f:6b:6e:6c:12:5f:
cd:39:1c:23:6f:ba:bf:88:c1:27:7e:43:a4:e9:2b:
ef:67:f1:d0:3e:2c:81:a8:1c:ac:12:7b:53:ae:a3:
56:1a:a6:4b:ac:50:c6:c6:2c:65:5d:52:6c:4a:8f:
30:ba:ee:aa:16:fd:6e:a0:93:ce:2d:69:3e:7d:c4:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:80:0F:4A:BC:28:0F:9F:4D:BF:28:43:19:FB:F2:B1:1A:30:A5
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:54:30:cb:7e:09:3e:0c:f6:26:d4:c7:7d:bf:88:13:71:
46:9d:07:d0:c3:b5:84:88:17:ac:c2:d7:34:ac:5a:e3:1d:05:
59:14:9d:e3:9f:c9:01:1f:fc:cc:55:17:0d:fb:31:13:e6:99:
f4:6c:76:8f:ad:47:87:4f:74:2e:46:ff:c3:9d:32:10:78:8c:
8e:e9:c8:79:d6:94:39:c2:49:54:7b:0f:ec:5f:a1:8e:f5:c4:
5d:3a:7f:3d:64:63:56:5a:76:57:1a:2f:85:9c:2a:99:6c:8a:
70:f9:f0:05:95:3e:e1:b5:56:5e:a3:60:1a:9f:91:47:eb:e8:
fa:de:37:f3:c1:4a:cf:c5:39:1f:95:45:6c:a1:25:a5:e9:8a:
9d:ba:9b:ce:09:81:7a:d5:d6:0c:47:78:70:92:b0:31:ac:ee:
de:f0:ce:18:cf:b6:01:56:8d:8d:e8:ad:a7:82:76:d3:f0:a9:
09:2b:dd:10:71:1a:1c:3e:81:71:84:36:f7:53:3a:13:c8:31:
51:b2:6c:c1:c3:2a:16:13:29:bb:5e:57:f3:ca:16:3d:62:3c:
ea:1c:0b:5c:9a:34:12:e2:ba:71:cb:2f:8d:64:d0:6d:c3:d4:
53:9d:c1:28:a1:4a:28:91:4f:b5:47:3f:43:7b:82:5a:28:b7:
a8:0b:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:29:43 2025 by rpki-client