Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: K2QL1Dg1CgsDjAOz01tJowVU/7wPUZ9vi43SUEB1Ouc=
Subject key identifier: 9A:1F:2A:65:67:B3:B9:42:AA:3B:5F:95:DD:B8:7B:FF:A5:C9:5D:1E
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 0198824278A23F31503CAC6B294C066988CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 11D9
Signing time: Thu 07 Aug 2025 02:00:50 +0000
Manifest this update: Thu 07 Aug 2025 02:00:50 +0000
Manifest next update: Fri 08 Aug 2025 02:00:50 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: MWF1Nkaz0o7WLm4mq301rY85mpOSFKyIuOsDcDKmXtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:78:a2:3f:31:50:3c:ac:6b:29:4c:06:69:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Aug 7 02:00:50 2025 GMT
Not After : Aug 8 02:00:50 2025 GMT
Subject: CN=9a1f2a6567b3b942aa3b5f95ddb87bffa5c95d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:1b:b7:44:6f:76:1b:a3:75:08:ce:9b:c4:
54:4a:77:15:2d:a2:aa:d6:16:72:6e:52:8d:66:65:
2e:f5:0c:26:04:1d:39:4e:50:54:e3:4f:25:ef:35:
0b:ac:3e:29:de:2f:a5:b3:03:1f:d4:dd:e2:1c:77:
71:1b:75:dd:96:66:d9:98:a9:f4:68:59:f4:a9:b2:
f8:8c:d6:0d:f7:1e:4f:ac:cb:7e:fd:f4:b0:3e:b7:
66:c6:9e:44:54:40:39:21:da:98:9e:29:49:23:b5:
b0:9c:de:50:36:da:13:82:98:61:85:33:ff:74:04:
73:b3:09:95:50:41:e8:fe:99:86:c6:16:4e:d4:99:
28:f6:b0:96:33:ea:f4:8a:e5:27:3a:bb:94:8f:bc:
f2:46:45:b1:da:fb:1c:22:1e:d6:fb:7c:a6:a0:b4:
59:36:8f:64:0a:49:41:f3:8d:3b:9b:56:a5:1f:8d:
97:73:6b:48:5a:70:fa:65:6e:97:fc:1d:77:54:70:
60:53:ea:27:6b:b8:08:e5:5a:7e:e7:cf:d0:e8:62:
22:99:d3:26:85:a3:82:05:23:b1:06:e6:a8:54:59:
86:df:0e:45:11:c9:a2:ab:da:91:3d:f5:4d:93:15:
1f:0a:fc:f5:ae:2a:ab:0e:a1:a5:7b:23:d7:07:23:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:2A:65:67:B3:B9:42:AA:3B:5F:95:DD:B8:7B:FF:A5:C9:5D:1E
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f8:2f:02:1e:80:59:06:f0:b5:00:1c:7b:12:bc:c7:4f:5a:
13:e2:43:40:4c:90:75:ac:4f:d8:51:d7:f0:6d:71:40:90:3d:
d3:94:0a:48:93:b2:b3:55:64:d4:6d:28:b0:03:59:0f:73:78:
50:0d:82:10:f0:15:62:90:07:ac:80:ab:08:d0:ae:0c:d0:82:
7a:82:22:95:11:02:8b:e5:38:fd:c2:ae:3d:a0:4b:7c:c8:dc:
79:f4:46:bf:93:6d:a4:2e:a5:59:de:1e:19:f3:53:e3:08:bf:
56:09:1b:f1:18:f1:fd:04:a6:be:a5:99:2b:c5:00:c1:b8:8b:
51:f5:d4:a0:08:5c:09:85:6f:01:98:79:9e:b8:d2:b4:f7:82:
b9:4a:bf:33:4d:97:58:d7:04:64:d7:8a:80:5a:78:00:b4:b3:
96:54:38:61:d8:ff:f8:30:59:b9:00:4e:ce:8d:c6:82:32:0d:
2f:e4:6d:36:d3:92:ea:70:ff:14:86:a5:4d:2f:69:66:eb:53:
65:be:1f:54:e3:51:93:2a:eb:09:a1:31:a8:1d:de:5d:b8:2d:
cd:b1:75:24:06:c6:87:51:66:50:64:9c:09:fb:7c:8e:cd:31:
20:50:65:d5:a5:b1:e8:66:bd:e2:bb:2b:bc:27:8a:c3:52:a4:
55:53:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:18 2025 by rpki-client