Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier: 4bvf3mFjwW2jfy6Ys7Rjw3NsJsKf3hrB6g7eUJM75hg=
Subject key identifier: D0:5A:5A:1D:89:9B:39:6E:36:A2:40:DF:C1:0F:27:8C:5A:5F:D6:07
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019934C91EB44B606A87DD37B55762389B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number: 0104
Signing time: Wed 10 Sep 2025 18:00:19 +0000
Manifest this update: Wed 10 Sep 2025 18:00:19 +0000
Manifest next update: Thu 11 Sep 2025 18:00:19 +0000
Files and hashes: 1: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: 6MmkHEAaOZDb8vsuAfY0ONZ/EkAq9NAI1jUsi1RVRf8=)
2: tVL_ENrKSssGhUZdoVpEaqnYAmo.roa (hash: scu79Aiv4+leHmZHVUYIuN/rg63h5ustfxBunlMeXj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:c9:1e:b4:4b:60:6a:87:dd:37:b5:57:62:38:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Sep 10 18:00:19 2025 GMT
Not After : Sep 11 18:00:19 2025 GMT
Subject: CN=d05a5a1d899b396e36a240dfc10f278c5a5fd607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:6d:44:dc:4a:c9:ef:84:65:7f:e5:5a:e2:
87:ef:f9:eb:68:d3:ee:a9:68:b7:b6:45:f0:e4:9f:
79:b8:01:77:35:a2:1f:66:f0:b3:18:0c:5b:19:57:
5c:5c:67:6f:6c:d4:22:76:ea:1c:11:71:6b:aa:ab:
8a:d6:82:74:d5:ad:d7:c4:2d:a9:fd:b5:c8:14:d3:
03:a0:67:b8:08:6e:e2:45:ae:43:d3:1c:69:fe:39:
a3:7c:57:48:99:cd:bf:e1:6f:13:31:21:0f:c9:61:
9d:93:54:fc:2b:39:59:09:18:1c:aa:fc:62:e8:24:
50:40:14:14:f8:1d:62:e5:27:e1:ff:d4:87:18:72:
30:48:c1:e3:f6:18:47:f0:51:3d:c1:c2:27:1c:b3:
47:e5:bb:ab:e0:13:d9:13:30:71:f9:64:a7:2d:cf:
e5:05:b2:6e:18:db:a0:94:88:e2:fa:a4:48:80:35:
00:a3:a2:2c:c2:e0:b8:4d:34:bd:b5:91:5c:18:55:
82:91:7e:96:04:1a:68:71:f7:0e:93:6f:c9:b1:a5:
28:70:4a:6f:cc:05:32:41:4b:bd:81:8e:db:30:a8:
6b:25:b2:32:e5:f4:cf:f3:61:30:d3:90:2c:d8:00:
43:5c:26:ca:7c:75:7b:ac:81:af:f1:1f:4a:c3:5f:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:5A:1D:89:9B:39:6E:36:A2:40:DF:C1:0F:27:8C:5A:5F:D6:07
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:90:7b:b0:e7:f1:cf:cb:21:aa:51:30:85:31:8d:e9:48:
a2:39:1a:93:06:0d:89:f5:6c:aa:d9:e9:e3:13:4d:35:cb:a6:
04:a1:3f:28:bd:81:65:a2:9c:24:5b:16:51:6d:f9:8a:d3:f6:
01:8d:59:bf:d4:9d:4b:89:b5:b1:cf:9b:3b:b3:59:af:3f:25:
2c:78:19:de:ce:63:65:1f:2f:9d:74:9d:a3:59:85:f6:3a:f8:
03:3d:7b:2b:5a:c7:db:30:b5:9e:7a:91:42:4e:0e:65:de:d5:
fc:f7:ce:27:7d:07:7d:96:cb:c8:bb:28:11:57:4b:a5:d0:3c:
13:3f:13:d8:9c:47:a9:40:5a:f4:7b:d4:f0:a7:d0:b4:f3:eb:
17:72:db:2d:d3:c6:df:79:1b:18:d1:bb:18:cd:63:a7:83:f9:
7d:b5:c9:60:0c:14:a1:44:c5:7f:95:ad:2c:0d:6e:6b:a9:32:
6b:dd:6d:4c:72:94:a2:55:8b:bd:64:fb:e4:f1:29:1b:57:7a:
95:1e:66:d0:95:54:c8:74:de:15:d1:0e:20:85:6f:54:f6:6c:
5e:1d:a0:e2:cf:8c:84:7c:02:5a:8d:cf:5e:18:a8:f5:3f:76:
73:c5:10:57:03:c7:84:c1:35:30:aa:e7:34:f4:36:2d:5a:56:
ca:d2:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:14:06 2025 by rpki-client