
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: IFmhjGuc+/4IDCR3ktLWWGmQypTh6rvnp98YtAS8P0o=
Subject key identifier: 29:08:D5:A9:A0:D5:86:CF:A7:AC:13:6C:A8:8D:9C:AB:12:73:54:39
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 01987F7A54399F3996C17A776CF049335867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:03:00 +0000
Manifest this update: Wed 06 Aug 2025 13:03:00 +0000
Manifest next update: Thu 07 Aug 2025 13:03:00 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: KyLIiR2WEeWsYROzmxszdpD9AIsSS5np6/k+NfVHqfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:54:39:9f:39:96:c1:7a:77:6c:f0:49:33:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Aug 6 13:03:00 2025 GMT
Not After : Aug 7 13:03:00 2025 GMT
Subject: CN=2908d5a9a0d586cfa7ac136ca88d9cab12735439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:ba:66:c4:d9:0a:5e:52:54:9e:f0:ed:84:
1f:44:10:27:af:72:3b:4f:a7:8f:90:bd:e2:bd:c0:
bd:7d:cf:2d:35:bf:3e:ff:40:c9:21:8b:4d:c7:1a:
4c:31:77:61:9d:5e:4b:b1:3b:12:a2:21:93:5b:18:
67:b7:d4:e2:15:ff:89:65:4a:1c:9a:ea:ba:55:f1:
10:00:9f:94:c9:96:8d:ff:d2:db:25:f4:71:6d:eb:
1c:e1:c2:4c:b1:2f:41:bc:7b:83:a2:8c:b7:d3:1f:
03:7e:0a:d2:f7:68:0d:33:e9:8d:57:80:eb:b0:3c:
e9:dd:e6:17:67:65:65:1a:ee:1f:99:28:19:3f:d4:
1d:e2:a2:ec:92:f4:57:94:53:d6:a0:9d:42:32:62:
2c:ac:ba:6a:0d:dd:bf:b2:fb:9f:91:22:2f:48:26:
6c:4f:39:d6:2a:2d:45:ba:f7:11:53:dc:d8:4d:2a:
12:9f:92:0e:8a:c2:41:3e:ec:97:bc:83:42:65:ee:
80:47:f8:82:97:ab:86:d6:a9:f8:3f:40:cf:ae:5a:
79:b4:f1:d2:e5:65:ec:96:91:cd:06:58:04:2c:6d:
1d:a3:93:01:87:23:21:38:85:f8:7b:fc:cc:c0:4d:
95:52:70:83:43:f8:46:94:5d:96:e8:f1:3e:a6:29:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:D5:A9:A0:D5:86:CF:A7:AC:13:6C:A8:8D:9C:AB:12:73:54:39
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:72:68:5e:1f:7b:47:8f:b4:76:e5:d4:b5:72:bb:61:3d:
30:3d:4a:d6:a7:72:8c:ba:c7:01:e0:28:8e:64:1f:b3:64:d1:
a8:8b:80:e2:f9:54:8b:6e:7a:85:8e:df:06:63:fd:fd:25:67:
89:ef:a3:1d:38:e9:b8:c9:0b:24:79:18:45:6b:d3:5b:b9:0a:
c1:ba:40:ee:78:22:4a:a8:26:81:0c:81:75:ad:e3:36:e8:01:
2e:96:7a:f3:64:74:13:41:fa:c2:9f:98:33:7f:fc:7d:79:dd:
3b:31:60:b6:92:36:52:b9:63:4c:21:d6:20:9b:8c:cf:df:f1:
32:a9:96:00:03:ea:7f:50:b9:e6:db:2d:ad:dc:db:18:3c:73:
4f:a3:6d:42:b2:e9:7b:91:90:10:54:a9:5e:b3:62:34:79:08:
19:c8:4b:ef:cc:cd:4c:36:d9:15:58:ea:04:0f:98:94:45:5e:
6b:6c:98:e3:e5:98:80:23:4d:bf:42:8d:b3:54:fe:b2:9f:16:
e0:13:07:ff:a8:f8:8c:32:af:da:3d:d7:2a:65:7e:86:2c:b1:
b2:9f:6c:d0:69:10:aa:98:a6:ae:75:ec:05:24:22:10:dc:9e:
58:64:d3:0a:2d:2d:91:3a:25:d6:3d:29:0f:67:6e:8d:99:57:
4e:c2:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:36 2025 by rpki-client