Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: jokRS4PnG45cEyJGF9Hd7Via1MdcZ+Ffqf5xFLecDP0=
Subject key identifier: 23:F6:85:5F:2E:C4:B9:1F:B5:2C:6F:16:F2:03:67:08:9A:C2:33:AF
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 01987C779C96590627E4DB127F644D9C6D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 23:01:10 +0000
Manifest this update: Tue 05 Aug 2025 23:01:10 +0000
Manifest next update: Wed 06 Aug 2025 23:01:10 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: rwxx1GoHdjs1yqnrHd9ajWcVMT7jbQtYElri/W/K5tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:9c:96:59:06:27:e4:db:12:7f:64:4d:9c:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Aug 5 23:01:10 2025 GMT
Not After : Aug 6 23:01:10 2025 GMT
Subject: CN=23f6855f2ec4b91fb52c6f16f20367089ac233af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:c6:e2:40:30:14:f0:11:a4:ce:00:36:3f:
74:f2:61:cb:77:47:6c:42:f2:70:7c:46:3b:d2:56:
9c:91:37:f1:c5:6e:80:75:3f:00:89:b0:bc:bd:69:
bf:cb:a1:f3:2d:1c:4a:12:59:f3:2c:e6:2c:e0:0f:
e7:9a:69:92:3d:d9:f3:18:b2:d8:de:16:81:6b:0b:
90:c4:85:24:ca:5a:9f:b6:17:d6:bb:58:03:83:26:
32:f0:c7:9c:0c:89:f5:57:9d:45:26:80:98:67:24:
d9:5f:06:7c:03:20:37:43:bc:7d:e9:ce:5f:99:b3:
33:85:2e:57:ce:b7:91:32:a9:3d:b6:94:00:a8:43:
2d:d0:91:2a:e3:7d:23:eb:ce:27:c3:de:4c:18:f1:
44:01:97:b8:50:5b:20:a3:86:29:43:43:7f:6b:a5:
cf:38:a2:f6:da:8f:b4:56:49:a8:3d:be:c9:52:a1:
83:ff:90:19:e8:3e:1a:f7:12:9a:a8:06:2d:cc:1d:
1f:67:57:e5:84:32:72:a3:dd:80:5b:7e:ce:aa:2b:
be:63:31:48:0a:33:50:ef:b6:05:d6:cd:19:4d:4a:
06:fc:ad:51:28:1c:c3:8d:64:bd:46:86:6d:38:1a:
f8:90:59:b5:0b:80:ea:fc:f5:d0:1d:f1:78:d9:50:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:85:5F:2E:C4:B9:1F:B5:2C:6F:16:F2:03:67:08:9A:C2:33:AF
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:cf:98:c6:80:b1:66:b1:41:5a:b6:73:ba:2f:d7:9f:fd:
a0:80:31:2f:e8:ff:76:7a:a1:0b:e3:af:8a:67:de:71:f4:71:
78:c5:d7:79:e5:a8:29:be:e2:11:7d:94:55:5e:d0:6d:12:25:
67:c2:e3:b4:b3:df:6d:18:a5:e8:04:7e:29:31:04:32:b2:bf:
2a:c8:90:eb:81:5b:1e:5e:e9:f8:b3:f9:e0:a2:26:bd:b7:21:
a4:6a:ef:a9:a1:0e:5e:fd:f6:c4:ae:9c:98:2e:e8:b9:09:21:
26:c1:8b:6f:66:85:e7:c8:fc:4a:9e:ff:01:68:37:ef:18:8b:
3d:91:de:e5:d1:95:15:48:33:90:ea:14:d3:08:c9:5d:95:8c:
ed:02:2c:a4:57:9b:65:10:80:76:2f:fa:df:8a:3b:d1:b4:c4:
7d:81:c6:95:e6:b7:99:f0:4b:8b:40:83:7d:cb:7e:19:4e:51:
86:d1:75:fb:f0:7d:ec:c4:34:4b:27:14:e0:59:9a:9f:fb:39:
37:c4:35:63:56:70:b8:c8:ac:8e:c0:39:03:8c:b3:ae:e3:41:
4b:e7:27:54:49:36:49:a1:15:4b:be:8f:cb:50:b8:a9:24:52:
1d:f9:e9:7c:2f:3d:4d:47:3a:24:37:e1:dc:00:da:74:0c:aa:
cb:74:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:16 2025 by rpki-client