Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: SP5M047AVY4FPj7G/4zYH024koAzx7lj9gmNzZo9vFY=
Subject key identifier: 38:43:03:C0:9C:2C:98:87:E3:74:9D:DD:C6:DE:79:C0:CD:9E:1C:EB
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 019894B8439F14FF7AA2473606EFB1D95C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0995
Signing time: Sun 10 Aug 2025 16:02:40 +0000
Manifest this update: Sun 10 Aug 2025 16:02:40 +0000
Manifest next update: Mon 11 Aug 2025 16:02:40 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: EFr/Jwg1NmEgCxkw5vD2r6fn3oHsn/Kd9jFLnbYE5KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:43:9f:14:ff:7a:a2:47:36:06:ef:b1:d9:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Aug 10 16:02:40 2025 GMT
Not After : Aug 11 16:02:40 2025 GMT
Subject: CN=384303c09c2c9887e3749dddc6de79c0cd9e1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:dd:79:99:a6:ef:20:3f:b7:82:48:3e:28:64:
b8:74:5d:ef:07:a0:17:52:f7:b7:51:65:1b:b6:03:
97:32:77:7d:20:9f:1b:1f:97:0d:3b:08:9f:fe:89:
9d:7e:2f:a8:b1:61:48:3c:e6:30:21:d9:c7:55:17:
63:41:4a:ce:b7:ab:ba:60:df:7b:64:89:ad:a6:ba:
3e:1f:37:33:67:f7:7b:e9:6e:c8:07:a9:c8:05:05:
f3:51:70:2e:34:cd:66:59:ea:68:87:63:81:05:ba:
39:52:2a:b6:15:5e:14:60:4c:28:7a:92:c8:6a:ef:
7d:2a:69:ae:84:e0:dc:be:6d:a2:22:4c:1c:1b:58:
6c:24:c3:80:84:08:cd:40:c0:e5:b8:cc:77:5b:2e:
12:79:81:a2:4d:91:bc:34:0f:aa:1d:5b:dd:e1:b5:
a7:1c:39:7c:71:33:3e:f9:d7:16:96:ad:bb:36:92:
2c:0b:00:d3:ae:ac:2a:00:62:2f:7f:df:2f:fa:b5:
c8:0d:70:60:38:af:5c:b3:6b:1a:41:fe:d5:c1:8f:
6f:f0:f3:6d:c2:c4:ca:e9:cc:2e:ce:05:5c:70:fd:
54:21:fb:af:0e:e1:39:23:bc:ac:d0:6e:70:f0:cf:
0f:c6:21:9d:22:57:6f:70:e2:7d:63:dc:b4:34:f6:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:03:C0:9C:2C:98:87:E3:74:9D:DD:C6:DE:79:C0:CD:9E:1C:EB
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:bf:53:10:c1:c8:8a:8a:30:c6:e2:ca:17:55:73:25:0e:
b0:f7:cc:ae:f9:b4:74:95:dc:02:c5:7e:1b:b1:3f:7a:46:bf:
54:f5:11:7d:4c:d3:93:c1:b2:0f:15:1f:e0:43:95:4e:bb:d8:
1a:f5:dd:c3:0d:ab:b4:6b:0d:7d:60:50:96:d2:2f:09:f0:ee:
89:5f:93:c5:99:df:f9:16:43:2e:ad:06:05:5f:52:b7:7f:ad:
87:ca:07:96:fe:29:6a:de:e9:a2:15:45:25:10:22:bb:2f:dd:
41:ff:d2:51:69:3d:47:ff:fd:f4:21:0d:52:9d:11:1e:54:d8:
42:c3:77:93:20:e8:bb:1f:9e:5e:ec:59:be:44:5c:74:51:f6:
f7:8c:fa:ac:7a:5a:48:df:6f:0c:23:da:d3:a7:10:17:87:f4:
5d:fc:0a:c4:58:ab:40:87:8d:70:38:c5:6b:a3:f1:9c:68:e4:
ad:63:d4:82:fc:8e:99:a8:01:f4:92:00:9c:d0:56:49:6c:bd:
99:46:7a:a9:43:58:91:7a:02:b5:fd:ee:9b:4c:20:21:34:2d:
3e:17:f4:1e:76:78:73:f2:08:0f:09:f2:bf:17:c2:92:73:77:
26:09:4b:57:3d:5b:72:95:95:a0:ca:83:9e:e7:22:1e:d1:f8:
7e:8a:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:44 2025 by rpki-client