Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: Twgtvwbw0IyxwvPb/XKxUuAT2wPlp1NKN5tqsatQ57M=
Subject key identifier: 1A:3D:62:4A:1D:3B:27:97:B4:3D:E0:BF:89:14:04:8A:A7:25:4B:81
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 01987F793E13C3B12A6402BDFA0E84302977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:01:48 +0000
Manifest this update: Wed 06 Aug 2025 13:01:48 +0000
Manifest next update: Thu 07 Aug 2025 13:01:48 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: OQ5nIoEeoB+ImjodQGJeSgkHNQj9CLcoIaHDfgMc0Gk=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:3e:13:c3:b1:2a:64:02:bd:fa:0e:84:30:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Aug 6 13:01:48 2025 GMT
Not After : Aug 7 13:01:48 2025 GMT
Subject: CN=1a3d624a1d3b2797b43de0bf8914048aa7254b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:18:07:ea:6a:8e:95:67:fe:c4:a7:a0:d1:
db:6e:ae:67:9c:a3:12:de:bb:6a:0e:d1:ca:47:bb:
0f:7a:2a:80:a8:79:85:96:29:1e:28:29:aa:48:c8:
ac:4c:db:24:dd:80:80:d9:fe:e3:82:53:61:a2:23:
92:20:a2:bb:8c:c6:ce:05:be:58:b2:37:aa:53:b8:
3a:36:71:48:c4:03:c5:7d:d6:0e:0a:08:44:59:1f:
f6:f2:0a:cd:32:da:62:60:95:20:74:06:03:f3:c2:
c7:32:c4:e5:a1:d9:ba:f1:9b:82:3b:94:17:9b:fd:
73:c6:cb:31:d9:cd:44:d6:41:5b:9d:48:e2:07:d2:
61:5d:ee:44:88:8e:13:34:2d:a1:bd:5f:59:56:fd:
01:c4:1f:9b:8b:5b:ac:4d:16:f0:ad:25:2d:52:8f:
6e:cf:b5:98:a9:68:e3:31:0b:73:17:99:fb:1a:d4:
eb:0d:8e:8d:f4:04:d9:cc:f8:dc:ad:9f:97:61:51:
3c:7e:0d:46:f7:b8:3d:e0:6f:7b:a4:fa:48:53:8c:
5f:91:13:bc:e5:f7:3c:94:2e:0d:eb:cc:f9:02:37:
c7:d8:a9:48:77:50:a2:f5:c8:71:b4:c0:eb:58:4d:
9a:81:a9:39:39:47:b9:dd:9b:7e:9e:21:5a:22:d7:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:62:4A:1D:3B:27:97:B4:3D:E0:BF:89:14:04:8A:A7:25:4B:81
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:59:45:23:af:30:fd:9a:ea:ae:24:9c:4e:b6:a8:14:49:69:
20:95:fe:b8:32:86:06:11:9e:d6:f7:24:f4:f8:53:4f:fa:8f:
60:cd:4e:4e:1a:35:4e:a1:14:dc:c6:a8:7b:ce:f3:e6:be:6a:
27:38:3b:27:3b:64:9b:48:0d:53:f7:bf:e8:f6:81:af:b1:82:
0c:3c:49:46:da:19:52:d1:78:a6:e0:55:d8:6e:0a:d0:53:3b:
af:1d:cd:f5:52:fa:bd:27:94:ad:c0:62:03:34:17:8a:42:08:
6b:b3:aa:49:99:1c:3e:17:d2:b0:01:46:53:e2:35:0c:94:3b:
be:75:5a:84:bb:cb:bc:56:a6:2f:91:f9:cc:41:5f:dd:8f:26:
db:c2:07:78:14:30:dd:3d:b2:e4:e9:2a:c7:c2:e7:21:f7:db:
96:38:52:48:a4:0c:7a:58:21:d2:01:1e:b8:f1:d2:f3:0b:77:
5f:cc:48:2f:dc:75:b3:c0:5c:13:26:05:f4:bf:a7:54:15:39:
4a:ea:4a:af:81:66:67:d6:75:c4:5e:a7:1a:c5:50:54:98:df:
e2:0e:a7:24:22:f9:9f:4a:3e:75:19:33:80:eb:40:be:8d:99:
5f:90:9f:9e:6d:e7:15:16:9b:34:80:9d:68:3c:9d:41:6d:63:
8d:ae:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:47:28 2025 by rpki-client