Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: zzfyi/unEUzDzDlYbQBkSh9hBpCV1dPDIh2+XUDIitI=
Subject key identifier: 96:C5:FA:EA:32:86:F1:C0:CE:E5:F7:36:24:36:59:2D:B2:69:25:79
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 019896A66BFAF665F618F0EC138BDB61F391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 163C
Signing time: Mon 11 Aug 2025 01:02:25 +0000
Manifest this update: Mon 11 Aug 2025 01:02:25 +0000
Manifest next update: Tue 12 Aug 2025 01:02:25 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: Zd6yY4n7v3oSmeIh+cQfYQUGeDaDaEiaLWCLypH0l44=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:6b:fa:f6:65:f6:18:f0:ec:13:8b:db:61:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Aug 11 01:02:25 2025 GMT
Not After : Aug 12 01:02:25 2025 GMT
Subject: CN=96c5faea3286f1c0cee5f7362436592db2692579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:89:d2:1a:1b:be:3a:f2:3e:e5:ee:ec:22:
43:f2:cc:8b:b1:54:58:cd:d2:85:31:74:c6:c6:0d:
fe:2e:8e:89:5d:b7:5c:2b:1b:f2:bf:07:d3:b0:6a:
3b:df:5e:8e:d9:71:9e:21:a6:32:c0:d9:44:21:19:
9b:e8:6d:8d:cc:cf:55:82:af:d4:34:96:b3:79:6b:
c3:04:d7:5c:34:2c:b0:56:67:58:da:d1:ed:2e:a7:
7b:93:8b:fe:f5:86:cf:5d:30:e8:06:db:4f:96:50:
b1:26:1b:bd:1d:68:89:42:f5:b0:b6:39:fb:a5:68:
72:9f:1b:fd:cd:3c:f2:b2:84:5d:71:cb:6f:0d:a0:
2c:25:1a:48:7a:8c:ce:27:e3:79:0a:28:bf:1f:82:
95:9b:80:09:83:3b:21:78:ce:fc:75:c8:e8:4c:4b:
a0:f5:0b:42:58:71:d3:65:07:7d:b8:07:0e:2e:ae:
e1:e5:56:28:c6:53:91:7f:c3:81:a7:24:84:de:46:
1f:de:d2:50:82:f5:52:ff:d3:ce:0f:59:a6:f6:0e:
54:c6:55:cf:55:c5:72:99:02:d3:48:e3:51:ee:70:
ae:bc:30:80:eb:ee:76:93:84:e7:7b:1c:3e:25:07:
16:5f:1e:49:eb:d6:1d:e7:cc:7c:dc:db:7c:23:e5:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:FA:EA:32:86:F1:C0:CE:E5:F7:36:24:36:59:2D:B2:69:25:79
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:b9:6a:d7:c3:90:67:b1:70:f1:3e:01:5b:29:40:5d:f7:
0e:84:bd:c9:49:9c:99:32:e7:50:47:ce:bf:1a:e8:24:7e:42:
b2:22:d6:78:80:3e:bb:54:20:43:64:39:63:70:9b:07:8b:c1:
8e:11:6e:0f:ef:d2:aa:ea:41:62:db:a4:41:7b:98:9b:1b:e8:
5f:f3:a3:37:3e:1d:59:c0:55:cd:ed:22:53:3a:dd:14:36:60:
4c:46:49:3e:b8:09:4c:fd:30:e9:ca:c3:50:82:95:a0:54:a5:
48:7e:b8:2f:ff:af:43:d9:44:57:4d:a6:63:76:64:c5:f7:b5:
eb:68:e1:d4:c7:3a:24:fd:ad:0a:94:86:ca:a7:ee:b9:0f:ed:
36:22:c6:ae:73:73:3c:21:2e:ba:41:aa:e2:a2:8c:fc:14:a3:
bd:90:0b:63:85:47:e1:cf:fd:65:de:c7:a4:4a:af:bd:73:40:
cd:ad:3e:9c:08:6e:e9:2e:84:1f:8e:59:c8:26:1c:35:46:5e:
70:a1:6e:01:e7:ee:4e:95:89:91:34:91:ed:1b:a2:9c:1f:74:
f0:a5:7f:82:67:c1:12:2b:34:cf:2a:b3:1b:7a:22:d5:1a:89:
85:1d:67:4b:81:7a:a1:66:1b:54:a4:84:e9:e4:1a:18:f9:e9:
79:e7:d1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:14 2025 by rpki-client