Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: lo4RWZqf7/TAE6gd8rCP6JUCURr3On3lSAlCugB3C3A=
Subject key identifier: 97:D0:3E:48:AD:1F:64:85:76:5F:F2:37:47:BB:16:A3:5D:A7:5D:6E
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 0198537B25B911E5E8FAA9A194E71A11A78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 077C
Signing time: Tue 29 Jul 2025 00:00:36 +0000
Manifest this update: Tue 29 Jul 2025 00:00:36 +0000
Manifest next update: Wed 30 Jul 2025 00:00:36 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: Og5++rf/t9j2pJ6KfZajtxbSbalMAKU+XboiZrufyxM=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:25:b9:11:e5:e8:fa:a9:a1:94:e7:1a:11:a7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jul 29 00:00:36 2025 GMT
Not After : Jul 30 00:00:36 2025 GMT
Subject: CN=97d03e48ad1f6485765ff23747bb16a35da75d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:a3:3a:47:89:8a:16:1b:c7:96:87:ac:60:
65:87:df:49:ad:f3:c6:d3:50:f1:7b:a9:2e:66:c1:
07:e0:4b:c9:f2:ac:f4:54:b9:12:3f:bc:a4:b7:36:
d3:33:72:e0:44:d8:dc:93:40:25:8f:ed:c5:84:9c:
62:8d:80:03:aa:87:d4:e3:85:4a:cb:69:6a:d7:e2:
0e:c4:1a:bf:2e:79:ac:49:55:83:ee:49:38:9c:8e:
be:c7:bf:16:47:b2:fb:e5:3c:2a:dd:f9:a7:8b:1d:
d1:89:ee:80:57:14:8a:78:14:ea:dd:93:78:f6:24:
0b:a0:1d:44:d8:69:3a:b2:de:ad:69:2d:7a:1f:ec:
d9:fa:16:f8:a2:8e:c1:4e:72:69:77:f7:49:73:9a:
5a:27:8f:55:cb:94:f2:fd:0d:2a:03:9c:4f:a4:11:
af:bf:f5:ff:40:15:d1:6b:81:c1:41:fe:49:7e:a1:
69:de:b4:6a:ac:5b:a7:dc:42:37:13:67:a9:48:bf:
f0:ac:89:aa:88:e0:48:0d:96:1a:9a:42:30:51:2f:
8e:0f:9b:4e:6f:7b:6e:bc:de:8a:e9:95:24:d5:59:
f8:12:e2:1e:9f:f7:49:d1:4e:b0:d1:58:4d:69:ae:
65:52:b9:96:a8:63:7c:16:8d:52:e9:9c:42:0c:ac:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:3E:48:AD:1F:64:85:76:5F:F2:37:47:BB:16:A3:5D:A7:5D:6E
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:5b:75:12:bc:d1:f0:12:6b:3e:2c:b7:eb:28:32:40:46:
7d:b8:34:4a:3b:54:80:6c:55:84:19:0f:3b:cb:0b:3c:0e:6f:
7d:7a:38:cc:dd:9e:83:52:de:45:75:60:6d:52:62:39:e1:05:
19:86:bd:9a:40:bc:20:92:61:d1:b4:84:b8:fa:d7:26:cd:92:
db:27:f5:25:b7:62:77:fa:a4:5d:71:0f:73:a3:43:14:8e:86:
5b:02:d5:68:1c:29:8e:df:3a:ee:c0:22:5a:3a:38:a7:4c:9c:
e9:c6:cd:0f:34:39:11:a0:c1:9f:1a:73:a5:45:0c:e4:f2:70:
78:99:60:e9:4a:40:c6:76:65:e7:9b:1f:57:05:f7:9f:4b:6b:
6a:97:18:98:55:b8:e4:c4:4e:cf:ea:95:ec:e1:c3:0a:e1:6c:
a5:85:97:29:b0:c2:51:40:03:40:8c:d7:9c:08:cc:ef:84:87:
4a:06:92:a0:51:74:d9:a7:56:60:a4:94:79:ac:b4:7c:e3:db:
4c:b9:fe:31:9d:1a:55:71:15:e9:6f:e8:87:7d:fb:f8:2c:5d:
76:15:c3:fb:73:ed:f8:20:35:78:98:64:67:ee:ee:1f:ea:f6:
d2:1d:ba:1b:62:19:c6:85:36:6e:6b:25:17:73:71:c7:67:79:
c0:8d:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:02 2025 by rpki-client