Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: G2eJddjuZtIjxrfZaENgfOdUoqZT/3+SZzrOZ5xDDPM=
Subject key identifier: 8C:53:F4:9A:7C:E6:E4:73:FB:6E:C9:A7:43:DF:07:A8:38:94:40:C2
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 0199326D5D287584B75DFF4AB5BD34DD285A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 07:00:51 +0000
Manifest this update: Wed 10 Sep 2025 07:00:51 +0000
Manifest next update: Thu 11 Sep 2025 07:00:51 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: HDzGmshtCNR/2Agi9V8EPo0T3kbHKGzoH+/b8uFatDg=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:5d:28:75:84:b7:5d:ff:4a:b5:bd:34:dd:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Sep 10 07:00:51 2025 GMT
Not After : Sep 11 07:00:51 2025 GMT
Subject: CN=8c53f49a7ce6e473fb6ec9a743df07a8389440c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:84:68:d3:ed:49:3e:a7:1a:01:67:d2:a3:
76:37:c0:00:22:e6:ff:18:a0:87:f7:14:3b:07:a2:
27:aa:b6:c8:5e:c1:88:ea:26:1c:0c:a9:c6:2c:77:
cf:fa:ca:52:96:de:d4:e9:18:90:29:25:bc:dc:c0:
18:f9:e4:ee:81:44:53:f3:5b:74:3c:76:c7:95:2d:
53:9c:87:01:bc:c2:83:43:74:32:25:9e:cd:5b:46:
fa:59:e8:69:15:62:56:4b:3f:96:c6:3f:83:48:71:
30:5a:fe:b1:59:c9:c8:be:61:9f:ed:a0:b3:db:be:
f0:24:bf:72:1d:d1:7c:83:5a:22:cf:9a:5b:6b:96:
6a:a6:e2:19:37:75:3f:2f:2f:56:a6:b6:18:b6:79:
cf:42:42:99:b0:a8:b7:55:a7:cb:e8:63:0b:a2:df:
42:0a:5d:89:eb:63:2f:c6:fe:2f:4f:c8:60:ae:87:
78:74:f9:f7:0b:08:41:cb:60:80:c0:f4:06:e8:16:
6d:87:fd:74:a1:83:d6:19:38:5e:98:68:84:1f:07:
13:5c:43:dc:51:43:e4:48:12:c3:86:73:fe:19:b8:
5b:a1:63:a1:51:a3:07:f4:27:5d:3f:ab:87:db:0f:
8d:ec:e8:14:99:cf:6d:c6:11:0a:1a:af:6c:06:81:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:F4:9A:7C:E6:E4:73:FB:6E:C9:A7:43:DF:07:A8:38:94:40:C2
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:ed:ea:6e:5b:94:7f:87:00:bd:5f:72:77:45:4f:25:66:
ae:2d:16:4b:27:d9:ca:76:ce:50:c2:e1:e4:38:31:2a:98:0c:
4d:fb:46:53:3c:f8:2e:16:25:e6:77:3f:8b:0e:de:fa:56:5d:
06:75:31:90:2c:03:bd:3f:2e:04:33:af:8a:f6:b2:1c:bc:57:
86:a3:ef:d3:be:37:40:d7:99:6f:b6:90:c5:09:46:84:81:5e:
63:f2:4b:a3:ba:82:0c:e7:e8:16:a7:61:6b:49:07:3f:37:dd:
12:1d:76:bb:d2:60:c0:b3:b9:a1:6d:56:ed:53:df:c3:33:2b:
b3:3b:50:fb:ce:68:ed:a0:f1:45:3d:0e:84:2d:0e:b3:df:f5:
53:1c:43:c5:2b:9a:3c:fc:66:4d:5a:97:21:a2:7b:fa:b2:31:
02:d0:16:d3:84:fd:96:39:d1:5e:67:69:ae:bb:5d:5e:2c:5d:
38:5b:2f:c5:6a:91:8b:71:2c:8c:26:c7:16:0d:c5:01:8f:57:
ba:6c:00:63:80:04:e7:4c:55:ab:a8:07:07:3a:4b:10:5e:7c:
27:df:65:63:6b:da:4b:b5:a5:4c:03:42:d2:73:eb:fd:c4:e4:
ab:f1:f8:55:e9:cb:d9:28:09:b1:b3:ee:dd:1f:48:4b:b1:bd:
3a:df:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:19:18 2025 by rpki-client