Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: ZVv/aHlWrV28X3apoRo9/KKPiPjyRMTWJycbkTWOVVk=
Subject key identifier: 5C:C3:7D:20:27:4F:AB:8A:0E:93:E1:BD:30:6E:84:8C:1C:27:96:5E
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019886C40B3CD73E72221950BC1F11A05BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0EE8
Signing time: Thu 07 Aug 2025 23:00:51 +0000
Manifest this update: Thu 07 Aug 2025 23:00:51 +0000
Manifest next update: Fri 08 Aug 2025 23:00:51 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: YAGR8lNFPeit2FUqf/C4ecyHovkOr+5/t6ofK4mlsQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:c4:0b:3c:d7:3e:72:22:19:50:bc:1f:11:a0:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Aug 7 23:00:51 2025 GMT
Not After : Aug 8 23:00:51 2025 GMT
Subject: CN=5cc37d20274fab8a0e93e1bd306e848c1c27965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:c4:3b:d0:98:fe:71:12:dd:ed:a0:80:1b:
c3:22:e8:52:5c:0e:33:84:12:4f:73:ff:5b:70:b4:
b5:ee:19:d1:35:c5:dd:e5:d0:02:cb:a9:08:2d:57:
ab:10:71:98:62:32:17:79:50:01:8e:fb:08:7a:af:
ba:3e:10:ba:e4:20:15:b7:4f:33:5c:ca:5f:1e:56:
d4:05:5a:f7:b5:e9:01:e1:7e:cd:94:19:0a:4e:33:
35:27:05:3a:c0:8a:8f:a6:24:b4:f5:1a:16:42:97:
aa:cb:e0:49:f2:57:39:f1:59:f1:59:1f:ea:e2:6e:
39:42:af:6d:32:52:82:34:92:99:9e:98:8d:9f:39:
a3:e0:56:b7:9e:33:d3:b0:10:f1:47:e5:0c:eb:e9:
66:ee:94:4a:72:b8:eb:3c:ba:0f:24:10:d5:71:2d:
96:8d:2c:85:18:0f:0d:ca:fc:aa:9a:a3:6a:40:ba:
f1:a1:55:09:ed:d8:9c:9b:aa:36:0a:ab:c5:64:c5:
ca:2f:3d:ac:92:c6:c6:d0:e1:f4:eb:0d:d0:35:da:
7d:2b:95:11:52:64:3d:9b:d1:c4:4d:0f:c7:ec:9e:
52:cb:2e:de:cb:64:d8:01:42:af:c1:74:fd:de:8c:
8a:c1:6f:c0:09:6c:66:64:02:e7:3c:ec:2f:06:1e:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C3:7D:20:27:4F:AB:8A:0E:93:E1:BD:30:6E:84:8C:1C:27:96:5E
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:06:9c:f2:51:e5:1d:3c:4b:9e:5c:b5:94:49:d5:eb:92:c1:
e2:cc:e7:cb:2c:cd:25:02:ff:a0:7a:ba:5f:dd:cb:fb:43:b0:
7f:b0:1d:10:70:de:20:5f:a2:f9:18:d8:be:a2:72:55:e8:50:
34:ad:50:ff:55:31:8f:17:2e:79:d1:30:1e:ba:21:32:bc:a8:
8f:5f:14:c6:dd:65:17:02:d8:30:4d:62:83:66:92:d6:6b:a7:
43:36:06:e4:56:ff:3e:7e:eb:8b:3b:24:fd:9c:65:7f:1d:f4:
fa:45:56:a1:59:1b:c5:dc:9a:22:64:ee:a9:b3:4b:8a:69:e1:
b7:0e:8c:8f:77:a0:2b:5b:10:96:a0:d1:d0:e3:66:73:ec:73:
e8:21:88:59:1e:f9:8b:02:eb:f8:44:bd:df:09:ec:6f:3f:2a:
b8:7a:9d:33:50:01:64:e0:e3:25:60:c8:16:b5:50:2b:c1:60:
8b:30:1e:ca:c2:b8:ca:f7:9b:02:90:67:00:6f:e0:ee:d1:cd:
02:bc:ed:2f:3d:85:6b:a2:e4:97:7e:c0:ce:09:cb:2b:34:3e:
09:5c:d4:67:b5:c5:d7:34:ff:6c:64:ff:ec:e8:29:07:df:33:
a1:e8:e3:b9:84:2c:a4:61:59:6f:b7:32:c0:02:5a:ff:cc:f2:
25:3f:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:10 2025 by rpki-client