Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: UaDqMqTpvlwpoZfc/jefJacssPpuYnTmbImeOd3FX4c=
Subject key identifier: 0E:FB:92:82:10:29:35:FC:6F:B5:18:CD:A3:13:D0:DF:AC:33:63:B5
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 0198665EAF8D0C77ACAADB38176B7C708330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 1610
Signing time: Fri 01 Aug 2025 16:02:17 +0000
Manifest this update: Fri 01 Aug 2025 16:02:17 +0000
Manifest next update: Sat 02 Aug 2025 16:02:17 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: Yul8LqmsuQH2N/nrpMogTJiFEIYzxPAISls2JdksEcI=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5e:af:8d:0c:77:ac:aa:db:38:17:6b:7c:70:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Aug 1 16:02:17 2025 GMT
Not After : Aug 2 16:02:17 2025 GMT
Subject: CN=0efb9282102935fc6fb518cda313d0dfac3363b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:88:a6:58:fa:e6:35:33:5a:bd:02:f8:c5:
e7:de:66:77:33:5d:6d:dc:52:17:84:c4:33:47:34:
72:38:70:c0:f0:bf:47:4b:bc:1c:45:20:97:f2:23:
34:1e:56:5f:c7:2c:bc:4d:96:91:e9:2a:82:ba:6b:
67:33:42:99:43:26:9c:25:04:32:96:fd:ba:c1:f5:
aa:04:19:29:50:c6:f5:6e:e9:f7:7c:9a:7b:68:26:
44:f7:65:9b:e6:e6:d4:49:c5:b4:6b:82:bb:74:f5:
ab:c1:e4:84:95:9e:7d:65:7b:93:8c:9a:94:9d:3d:
cf:0f:dc:32:af:22:61:a2:46:8f:5a:2c:e1:24:11:
0d:bd:aa:16:70:cb:bc:ad:ac:8f:14:0f:5c:ff:0b:
bc:7d:a6:fe:20:18:d1:09:7d:39:53:92:6e:d0:77:
4a:04:17:7f:60:21:3a:03:4d:a3:30:b7:6c:d3:59:
99:b3:4e:3c:38:70:43:fb:cd:8c:6f:44:2f:e6:44:
b1:60:c5:30:2f:4c:9d:79:5c:de:42:bb:c1:1d:0d:
c3:b1:90:97:87:35:27:86:9a:b1:8a:51:5c:0f:cd:
7c:4f:9a:a8:ea:4f:56:a0:3b:00:05:31:26:8f:a9:
c0:03:5a:67:53:b1:93:cd:87:0f:74:34:29:b4:1b:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:92:82:10:29:35:FC:6F:B5:18:CD:A3:13:D0:DF:AC:33:63:B5
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ae:9e:c1:29:c7:1b:94:a0:0d:d8:bd:c8:f3:00:d6:60:32:
31:3a:79:78:f2:03:6d:f9:58:24:4e:f8:a2:92:1b:f6:64:f7:
0a:a5:2f:74:34:ac:8e:2b:80:c4:fe:55:ac:a1:f0:d7:ad:a3:
46:d8:eb:d0:a1:9f:5c:d2:76:11:37:7e:0e:15:da:6d:ee:37:
44:77:f9:3e:be:04:c4:89:de:3f:54:d8:c5:3f:83:e3:35:09:
13:af:05:bd:2e:d2:8f:7a:04:7a:da:41:ec:dd:1b:ef:f2:f3:
61:83:46:cd:73:b4:6e:cc:46:cc:c7:fd:2a:cb:38:68:dd:bd:
63:e0:14:00:55:5f:ec:0e:21:2c:1f:d2:1e:8e:a5:c4:07:15:
4e:85:4e:3e:74:d6:de:1c:5b:29:ca:85:c2:90:4b:63:82:7d:
31:70:0e:48:a5:04:a5:7c:80:f6:a9:37:fb:b7:55:df:99:72:
3b:4f:8b:3a:8c:8e:15:2e:7d:a6:9e:4a:a2:80:39:23:43:a2:
67:eb:24:ae:d7:ec:17:12:b5:51:6c:05:8b:0f:9f:7c:f5:11:
5d:3e:fc:e4:60:53:63:02:74:10:6e:66:0f:25:12:36:47:d5:
0f:36:0e:54:27:8c:db:9d:a9:8b:57:84:f3:9e:e5:cb:0d:c7:
4a:be:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:43 2025 by rpki-client