Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: yucPx31Xfo000TpL0X4GOxhoIludObzMixf1yeZdQI8=
Subject key identifier: D3:85:F0:31:A5:0F:14:58:76:F1:F7:46:C8:B2:08:CA:A5:C1:0D:E2
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 019872CF69262D462A6893D205A66DE42474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 139C
Signing time: Mon 04 Aug 2025 02:00:52 +0000
Manifest this update: Mon 04 Aug 2025 02:00:52 +0000
Manifest next update: Tue 05 Aug 2025 02:00:52 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: mpzltBO1jWZvKlqMVLSIK6bkRhhaS6tj/21JHDn8VEs=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:69:26:2d:46:2a:68:93:d2:05:a6:6d:e4:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Aug 4 02:00:52 2025 GMT
Not After : Aug 5 02:00:52 2025 GMT
Subject: CN=d385f031a50f145876f1f746c8b208caa5c10de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:3e:d2:65:11:72:5f:95:42:c0:b6:d0:0f:
c1:80:e4:fa:f3:01:f2:e3:95:c8:ad:4a:47:fc:78:
93:a5:79:73:b0:d4:9f:1c:0b:44:3d:ad:9d:03:e0:
20:52:71:a1:18:41:2c:53:71:d0:ea:ab:d8:5e:80:
1e:49:aa:59:be:27:76:79:2c:4f:af:db:c5:af:7e:
53:af:ab:1a:2b:33:3c:48:48:a8:ea:fa:f7:06:e4:
22:80:a4:5d:c1:d0:96:20:63:42:f2:89:96:bb:32:
54:55:f4:19:38:29:55:31:ee:54:30:e5:29:cf:4e:
41:e5:99:e0:11:37:21:ee:1f:f8:6b:74:86:32:49:
d8:c0:31:85:e8:bf:85:42:7d:d6:24:fb:21:eb:f2:
9d:ac:45:e1:b8:cb:53:e0:c5:41:44:38:e7:ba:13:
33:4e:e0:63:3f:8a:24:0e:f1:04:67:a2:a9:83:eb:
ed:13:fd:67:22:ec:21:99:5a:8a:a1:06:a8:b7:df:
b2:6f:92:30:a5:01:75:ab:69:6d:f5:31:a5:ad:af:
8c:ca:e8:0b:78:9d:f0:d6:89:1e:88:ca:5e:8a:d6:
81:32:15:a4:09:ad:0f:1b:8a:82:31:af:5c:39:c9:
81:29:94:20:41:bb:7f:df:d6:e5:92:69:0d:b3:e0:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:F0:31:A5:0F:14:58:76:F1:F7:46:C8:B2:08:CA:A5:C1:0D:E2
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:40:a9:c4:86:f0:28:05:90:c5:ca:b3:a6:77:97:93:a5:7c:
bd:3e:0c:f0:01:34:6b:7e:eb:09:ec:d0:54:3d:72:bf:f8:13:
75:6c:81:36:36:1c:9d:9d:75:84:54:da:1c:4a:b8:97:3d:6e:
d8:8c:52:a0:f6:5d:86:55:ec:94:de:27:d3:87:13:0a:a2:70:
ad:92:f7:0c:63:bf:79:03:02:ab:ee:fe:5b:de:5a:d3:70:dc:
a8:73:d3:54:80:de:38:5d:d6:73:22:51:af:fa:cd:6a:3a:0a:
c0:d2:6b:a8:03:c1:ab:39:25:83:89:e6:fb:98:95:b5:a5:10:
3a:bb:b3:3a:98:c7:b1:3f:b9:8e:19:15:e0:f7:b2:ae:52:06:
72:8e:73:ac:46:a6:df:c9:2c:69:47:e4:10:09:9d:32:c8:fb:
07:e0:29:99:8b:ea:d4:f7:83:78:c1:c1:fd:1b:bd:02:b9:d6:
c6:6a:cb:c5:8b:d0:09:fd:a4:17:25:7e:b1:7b:de:a5:e9:16:
a7:f5:c6:07:3f:8b:e7:6e:63:73:f7:f6:62:cf:8c:a9:da:8b:
87:07:b3:02:1f:d9:f6:b0:cb:f1:50:3f:53:e4:07:fe:47:18:
13:3d:e4:a2:49:b3:e1:c2:07:dd:8a:69:81:df:5e:4c:6d:97:
19:bf:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:01 2025 by rpki-client