Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: YxL/5Xb+/8XCVq9vQLLM3AhJDl7zSrCeQ8bU+UQyHSk=
Subject key identifier: FD:7C:4E:76:55:75:FE:2D:4A:87:16:31:39:AB:6F:98:11:D2:4B:4C
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01983502C789AC108B7F951F083C55CF69E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1601
Signing time: Wed 23 Jul 2025 02:00:31 +0000
Manifest this update: Wed 23 Jul 2025 02:00:31 +0000
Manifest next update: Thu 24 Jul 2025 02:00:31 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: M1L6JHNQpKHWuUyUyQqJqjZIs3FwmCMr1n/lZ3Tyk9M=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:02:c7:89:ac:10:8b:7f:95:1f:08:3c:55:cf:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jul 23 02:00:31 2025 GMT
Not After : Jul 24 02:00:31 2025 GMT
Subject: CN=fd7c4e765575fe2d4a87163139ab6f9811d24b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:fb:79:98:45:00:0a:6f:3a:b1:11:ea:5f:
94:05:2e:d4:4d:f9:21:ab:af:c3:60:4a:ac:ea:83:
f3:e0:6e:dc:6a:b6:47:de:a9:b6:a6:ec:75:28:3a:
6b:f4:8a:08:74:f7:c0:aa:a8:d8:fe:4f:5a:6c:60:
11:eb:b3:25:b1:b8:27:d8:f1:45:95:19:aa:36:9a:
bd:ae:fd:12:05:aa:03:6b:1d:56:10:09:da:08:24:
3e:b8:3d:95:7d:1d:c1:35:c6:ab:45:09:57:bd:32:
35:d3:22:f3:0f:df:87:56:8e:e6:4e:0f:24:31:d9:
26:5e:ac:e9:a4:6d:e4:2e:a1:a8:91:1e:0f:07:ca:
8a:a4:8e:d3:c2:e8:21:27:cb:2b:86:9c:15:4e:1d:
41:22:24:9a:1e:1a:4f:a8:99:8f:3f:b8:e6:53:6d:
80:c2:06:04:f9:6e:50:4c:b9:15:d1:0c:cf:b4:7d:
8c:06:f1:63:70:99:81:d3:38:2b:e6:cd:a4:48:ab:
3e:72:a7:ca:7b:7f:2d:3b:2a:0b:d1:95:35:17:f9:
0a:a0:3e:45:a5:c8:2a:a2:59:5e:0f:3d:1e:6b:7e:
61:98:64:4c:d9:a2:98:c7:4f:9b:58:75:a3:af:8b:
cc:2e:8e:9b:38:7a:ea:34:48:bc:94:6a:fa:96:d6:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7C:4E:76:55:75:FE:2D:4A:87:16:31:39:AB:6F:98:11:D2:4B:4C
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:12:38:44:eb:67:75:30:b3:2f:6a:6b:7b:96:71:f4:7e:
cb:8f:cc:c9:74:01:0d:5a:69:45:a4:26:e7:8f:39:71:3d:f9:
98:9f:69:fb:bf:72:8a:d3:f0:58:db:a0:00:e3:ea:f3:9a:62:
01:94:54:69:87:61:f2:46:04:98:20:bc:65:3a:56:63:0c:cd:
2f:25:2d:b0:66:b0:ae:ef:14:d9:49:6b:d7:9e:b3:01:10:13:
e1:bd:19:0c:7d:95:71:33:01:32:09:65:28:db:14:82:3a:66:
c6:ad:46:be:d3:d2:3a:77:6d:f7:f1:86:27:2c:e8:31:38:4d:
bf:19:5f:ce:2d:d8:ec:2e:2e:9c:d9:3e:20:02:4b:05:92:21:
20:b9:d9:36:8a:f3:27:3b:8b:8e:e5:4b:7f:3a:1e:95:f6:9d:
65:6a:30:8b:24:2e:18:33:ad:70:6c:ba:2a:43:fe:c6:4d:f6:
70:07:99:f2:6c:55:b4:fd:50:d9:38:fb:93:e0:40:ee:10:0b:
8f:f2:e9:a2:e7:4c:8c:2e:1e:39:ca:e5:ca:4a:1d:32:e5:2a:
a9:d7:85:ba:82:c3:3e:2a:2e:0d:0d:b6:18:ad:fc:68:31:7f:
23:cf:ca:18:29:af:7b:7b:15:f3:00:a0:7f:c8:62:53:aa:4e:
4c:39:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:05:06 2025 by rpki-client