Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: f5f6IogW6AhFScnpbIY4JV/gl9aGJuGBN5gV68/XRIs=
Subject key identifier: A0:D9:AF:FB:DD:7C:F1:19:D2:77:B0:CD:F2:52:21:54:FF:C6:AF:EE
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01987E2F30E92BABE0B0593240D06246A1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 07:01:18 +0000
Manifest this update: Wed 06 Aug 2025 07:01:18 +0000
Manifest next update: Thu 07 Aug 2025 07:01:18 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: fe2OU7/crvmQEoouXqV4i48mAY2489Ypt9B+5ya91qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:30:e9:2b:ab:e0:b0:59:32:40:d0:62:46:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Aug 6 07:01:18 2025 GMT
Not After : Aug 7 07:01:18 2025 GMT
Subject: CN=a0d9affbdd7cf119d277b0cdf2522154ffc6afee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:a0:2a:cf:ea:5a:fd:cb:29:5d:8e:82:09:
1d:15:16:39:48:ac:af:87:af:f8:c6:c1:70:3e:9c:
3b:33:4e:a0:f8:06:79:6e:ee:cd:97:9c:0e:a7:3e:
22:35:01:b0:36:b0:a2:e5:cf:a0:d9:06:b4:32:03:
49:6d:55:e2:f8:04:2f:2a:28:c6:89:15:05:15:ef:
54:8c:60:91:ce:82:9e:34:38:24:f7:bd:eb:31:3f:
a5:c2:71:1f:6d:23:f5:16:87:ac:75:d1:89:13:48:
0b:9f:36:c1:89:51:20:b8:35:00:ec:3d:bf:42:98:
68:23:96:dd:45:23:f5:c9:14:f5:8e:e5:d3:e6:85:
ee:87:1b:18:bd:89:bd:8d:f7:25:0b:ee:e1:8f:36:
34:99:4e:50:79:d3:d1:81:6e:79:60:31:50:6b:4c:
32:66:04:2f:00:4c:44:b6:81:ed:fd:70:c8:1a:22:
d4:94:47:a5:1e:ab:bf:97:fc:e4:ab:1f:79:5d:d8:
5d:86:c8:b1:a7:6b:8e:01:e8:33:03:7a:d5:ef:3e:
3f:b2:52:25:72:f3:83:ad:86:98:6b:27:4b:84:a1:
23:16:c9:4a:a4:f6:d9:6c:b2:8c:8d:79:aa:2c:72:
d5:5c:a8:2b:d2:c5:b3:1c:d6:9f:78:13:90:e1:91:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D9:AF:FB:DD:7C:F1:19:D2:77:B0:CD:F2:52:21:54:FF:C6:AF:EE
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:c0:99:e2:67:24:77:c5:6c:1e:ee:c1:f0:69:5b:58:2b:
5d:ba:46:00:14:23:f4:16:5c:d2:3a:17:0b:61:e2:49:bc:eb:
a4:0e:ef:5e:15:a0:c1:9a:08:5d:c4:7b:8f:21:b1:d0:e9:f3:
86:57:e9:94:4d:c2:18:24:59:4d:7b:5f:64:5e:24:e0:da:c0:
3f:64:6c:58:9b:e2:d7:80:ed:7c:ef:d3:5d:63:1e:9d:58:02:
66:35:ae:77:50:c9:a5:90:91:03:38:09:0b:2a:ad:3a:4a:64:
9e:b3:c1:3e:90:62:29:a6:ed:ca:6f:ad:dc:c0:e8:af:9d:a5:
33:5f:00:b1:ba:d0:d6:7c:66:95:2d:d7:84:2c:07:fa:1d:3e:
0a:16:ea:90:23:b9:80:a0:b3:38:b2:1e:3f:60:2d:a8:21:a1:
03:27:e8:ca:ea:ba:9e:f4:bf:00:44:c3:39:98:af:89:78:18:
b1:1b:29:48:a0:17:74:18:d1:b3:5e:e9:ce:f4:d1:e2:3b:50:
98:c8:d5:f2:83:f1:9b:7b:73:80:d1:90:9e:9b:03:a5:72:52:
c0:d9:10:52:59:88:5a:8a:d5:33:16:3d:fe:07:bf:94:82:e5:
29:d4:bf:c7:5a:41:c6:28:4c:87:36:a1:05:84:e7:08:2a:b4:
d7:b2:42:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:47 2025 by rpki-client