Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: zT0XHZ0hdZlE+jtgnjMZgJ7MXguP/ARp9QEmvQEbDPw=
Subject key identifier: 50:1E:AB:05:D5:5B:B3:C6:03:AC:3E:66:22:F3:41:10:3F:B3:DC:CA
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 01984A77B536D9E20A8B20FE9DF574E4106A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 06:00:15 +0000
Manifest this update: Sun 27 Jul 2025 06:00:15 +0000
Manifest next update: Mon 28 Jul 2025 06:00:15 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: lNDxBSRh0wx/DzdAv51QU8MYK6UHD2OTBVWKM2JmXH8=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b5:36:d9:e2:0a:8b:20:fe:9d:f5:74:e4:10:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jul 27 06:00:15 2025 GMT
Not After : Jul 28 06:00:15 2025 GMT
Subject: CN=501eab05d55bb3c603ac3e6622f341103fb3dcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:a8:cf:b9:13:a9:94:0e:9b:7a:00:83:2f:
b5:47:55:ec:ab:ed:0d:f2:ae:72:25:b0:b8:a2:35:
d0:e2:8f:e8:20:31:41:95:b7:93:61:89:ec:22:81:
a5:7e:f5:36:33:20:38:0e:5a:d4:51:4f:29:d8:51:
8c:d1:cd:6f:25:29:01:a6:6b:53:03:4a:6d:af:d9:
67:cf:14:3f:fe:df:1a:b0:a7:7e:3d:01:f6:0d:60:
4a:93:3d:62:c5:8d:96:30:64:11:fe:33:5b:d8:1f:
ef:6b:f9:db:dd:b9:50:80:05:4a:81:3a:b1:09:91:
39:41:90:84:37:1d:84:0c:06:9b:1c:95:70:3a:88:
88:fe:ee:ec:a9:5e:d7:af:06:dd:a0:f8:93:b7:66:
3a:f8:12:a7:8b:e5:c5:8c:f2:c3:fa:83:7a:a5:07:
10:2b:55:3e:b3:37:85:61:98:07:02:e7:33:82:e0:
58:d9:83:c7:ab:73:25:09:b1:16:30:d7:b0:ad:78:
53:1c:0b:70:c0:5c:66:34:6c:d7:6e:e9:6d:26:66:
4f:84:5f:8c:b7:d9:2c:18:fa:2a:85:7d:43:5e:0a:
8b:72:aa:a9:ae:9d:3b:64:28:ed:21:57:88:25:42:
b7:f0:67:40:13:00:2e:91:1a:aa:04:2d:55:f2:23:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:AB:05:D5:5B:B3:C6:03:AC:3E:66:22:F3:41:10:3F:B3:DC:CA
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:47:a3:2d:d2:09:53:32:c2:c1:b7:f6:cc:9c:9d:2d:81:
26:60:82:c8:c4:f3:99:c9:3c:c9:f8:dd:59:7b:58:6d:81:be:
04:6f:f2:50:e1:a1:e7:71:bc:fa:8a:17:81:cf:49:c3:26:b3:
81:da:56:43:0a:56:d7:78:a7:a6:2c:50:74:aa:7d:b2:3e:ac:
f8:9e:54:14:5f:39:de:f9:3e:5a:90:a4:81:61:e5:c3:de:7c:
15:1b:12:ec:9d:57:66:9a:ad:d4:53:cf:6a:e1:77:99:fb:82:
ae:87:4b:b3:82:cc:2f:e8:9d:3a:45:e3:a8:e0:57:06:f5:dc:
09:de:2f:49:3f:a6:58:3d:d3:96:bd:b4:13:13:fc:95:70:11:
6a:03:ba:fe:bf:41:34:4c:9f:ac:7a:bc:39:42:e3:d3:87:f3:
32:52:f6:d7:c9:79:a7:e8:08:08:17:92:eb:45:1f:6f:94:ce:
77:2e:19:cd:e2:fb:be:b2:8d:32:81:1e:17:79:4d:e9:a1:be:
e2:c9:73:bf:4b:70:5d:14:a9:aa:6e:07:76:dd:7c:fe:c0:4e:
c5:53:6c:89:49:f0:7f:f8:fb:b2:1a:b4:73:5e:c6:b3:b7:82:
5a:a2:f0:ec:f0:24:45:85:b4:b2:e3:73:97:b7:b0:59:d5:b4:
91:ea:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:06 2025 by rpki-client