Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 4MuWE9XYWNMhlBflXv7GJMvohhV3F7hUcN5Yr6kP8wE=
Subject key identifier: 65:A6:51:A7:43:6D:5B:8E:C9:B2:50:E6:3E:E0:79:F8:BB:E5:6F:6B
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01988FC79294DA14268983AF68846AECC05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1505
Signing time: Sat 09 Aug 2025 17:01:17 +0000
Manifest this update: Sat 09 Aug 2025 17:01:17 +0000
Manifest next update: Sun 10 Aug 2025 17:01:17 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: 4Lgv1pdDKM62nz8E9P2lz0gh3wt67LfATLcOihJbBWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:92:94:da:14:26:89:83:af:68:84:6a:ec:c0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Aug 9 17:01:17 2025 GMT
Not After : Aug 10 17:01:17 2025 GMT
Subject: CN=65a651a7436d5b8ec9b250e63ee079f8bbe56f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:b0:64:23:a1:d4:4c:c0:bd:42:8f:75:55:
5e:33:a0:cb:f9:a8:77:1b:9f:7d:60:95:ce:f9:2d:
b0:6d:c0:ed:43:c3:0d:91:0f:8f:29:cc:a5:ac:7b:
00:1a:7c:6f:ef:a5:c9:a0:de:02:e3:0b:d9:74:e1:
b7:16:09:42:e4:83:4a:8f:9d:0f:a4:9a:43:b2:56:
c6:ce:cb:59:f3:f4:30:f5:fd:21:80:5a:f3:fa:4a:
51:18:7a:2a:31:d9:23:43:97:57:18:02:5d:09:8f:
6c:dd:ed:24:e2:12:b7:2a:17:80:1b:da:41:88:00:
eb:13:79:2e:3d:23:af:df:fe:77:43:dd:e5:45:a0:
65:fc:3d:99:68:cb:a8:23:dc:34:ae:3b:45:fa:fe:
42:49:18:66:af:e8:bd:a5:f4:32:1c:d9:16:4b:52:
80:96:2e:5d:00:cf:e7:aa:8a:5a:70:7d:53:de:18:
64:96:25:d7:f9:80:92:54:89:7f:ae:f2:1b:b6:c6:
2e:92:81:2d:db:03:84:2b:2b:67:93:48:a8:77:33:
d1:9b:a7:a3:43:b8:d1:64:df:ee:8f:d0:98:30:18:
bf:89:33:53:41:7e:2f:fe:81:65:b5:95:cb:12:7c:
19:92:5d:bc:16:40:64:e3:c7:5d:4f:1c:6d:b7:24:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:51:A7:43:6D:5B:8E:C9:B2:50:E6:3E:E0:79:F8:BB:E5:6F:6B
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:cf:3f:88:8d:1b:60:8f:b4:2f:73:86:9e:de:08:9f:e9:
5a:26:ae:a3:75:3b:d8:69:13:f9:3e:93:d0:14:b0:14:bc:d9:
2a:0c:92:61:c3:75:11:7a:b2:8a:8e:63:71:40:43:dc:ce:e9:
28:7c:95:79:b2:69:33:1a:3e:2d:64:b8:dd:54:b7:32:d5:0e:
f4:00:90:40:9f:22:f1:f5:c5:a0:81:8b:c0:93:89:2d:40:f4:
9d:b9:67:70:9f:00:a2:48:d8:7a:99:d3:c4:60:40:8f:93:4b:
9e:13:43:4a:e0:30:e2:dc:9a:8a:59:51:b1:02:38:3e:24:f6:
09:1b:f4:5a:bb:1e:bb:1e:58:d9:cd:08:cc:54:82:50:9e:7c:
01:76:ac:e4:e1:6d:89:7c:b7:bb:b2:81:04:4c:c8:22:7b:d2:
e6:89:23:53:6b:10:a5:9f:bd:75:02:e1:b6:8b:27:c5:97:d0:
27:5b:1b:9a:cc:41:a2:23:da:1d:a7:f3:4c:9d:be:07:16:13:
2b:f9:18:18:e8:07:44:f1:ff:18:22:a1:50:a2:80:4e:4e:17:
78:d8:f1:e1:91:d4:47:98:9e:61:37:12:8b:39:71:8c:1c:cd:
c0:de:a7:53:76:74:38:c8:a6:c6:80:65:72:6b:51:f5:a4:f2:
b4:5a:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:00 2025 by rpki-client