Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: y21joOifRncfl8SaQ7oMvlB4+zHJL+tnuKvr2N8z9bo=
Subject key identifier: 00:6F:7B:B9:84:54:3D:D8:B4:A2:1E:FD:C5:ED:AA:E5:0F:C0:95:5F
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 019922FA7E04DDE2EF4D777660BA567F3DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:05 +0000
Manifest this update: Sun 07 Sep 2025 07:01:05 +0000
Manifest next update: Mon 08 Sep 2025 07:01:05 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: 0yY4TTOIvBg95rSfacYlTiFCf7IaWEDOoHEn/SoqQnQ=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:7e:04:dd:e2:ef:4d:77:76:60:ba:56:7f:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Sep 7 07:01:05 2025 GMT
Not After : Sep 8 07:01:05 2025 GMT
Subject: CN=006f7bb984543dd8b4a21efdc5edaae50fc0955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:4b:b8:8c:90:d4:fc:77:58:d3:c3:bd:9c:
56:80:81:28:b2:fa:0b:16:50:73:f1:91:06:3f:47:
84:82:aa:90:0f:0e:61:aa:e2:da:1c:f7:03:7d:35:
78:3b:aa:3a:44:11:c9:9a:22:f5:bb:f6:3f:ec:59:
9e:1a:ca:8a:a7:d2:f7:68:91:ef:7d:43:e7:02:f8:
6a:16:c6:b3:6a:68:cf:c2:3d:9b:c8:49:69:85:ce:
5b:65:42:c6:2d:d0:a8:d0:7b:05:7d:98:cb:78:7e:
73:ae:c3:9f:97:1b:d9:67:4c:67:85:a7:b8:90:36:
63:aa:26:d9:ba:f6:6f:c9:42:d1:d0:b2:33:1f:23:
7f:50:4b:57:04:84:e5:f3:41:1e:9f:0c:59:9e:3b:
c1:17:80:68:68:17:f0:c4:4a:60:27:89:c4:6b:4a:
9e:b0:4a:d8:d8:44:8d:87:a5:92:a8:bd:2d:79:57:
fe:a4:42:2c:e4:76:63:66:37:ab:e4:5d:b4:fe:93:
cc:17:8a:31:5b:9f:29:4d:4f:8e:54:b5:ca:29:fb:
53:af:dd:ae:b3:30:53:bd:f2:bd:5d:46:fc:53:8f:
13:12:64:1c:b9:88:c6:71:8c:8b:d2:f5:45:55:93:
de:9e:92:a6:43:65:d1:0d:a1:74:a1:8d:80:aa:ca:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:7B:B9:84:54:3D:D8:B4:A2:1E:FD:C5:ED:AA:E5:0F:C0:95:5F
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:c7:08:14:43:92:1b:2d:d0:07:71:01:14:77:c4:0a:bf:
f0:53:f9:5d:52:f3:41:31:08:c2:af:85:3f:45:45:09:7c:e8:
f3:b1:5e:c9:5f:33:7e:3f:ab:05:70:08:1f:86:1d:8c:03:3b:
4d:f9:c4:6a:d1:23:1e:62:02:f0:35:02:88:bb:34:12:a7:b0:
64:c3:0c:6e:e7:0e:01:65:3e:82:0a:ee:bd:1d:a8:6f:7a:90:
01:38:3d:dc:91:fa:a0:c1:1e:d3:55:14:0b:ba:21:cb:1a:20:
3e:18:9f:0d:3c:06:7b:93:a2:df:bf:2f:82:96:f2:7b:f0:5e:
89:20:6d:9f:3d:9b:20:1c:f8:f8:74:9c:ae:d9:c1:36:05:6f:
62:0e:b2:ee:97:eb:22:da:0d:7a:7c:54:4c:eb:14:d4:46:af:
ea:eb:53:66:ce:b5:03:49:69:37:bc:52:ed:97:47:69:f2:cf:
c8:c1:e5:26:63:c8:fa:cc:ab:10:a0:10:fe:9e:8c:ff:b0:2d:
38:e5:86:1b:8e:ca:e0:cd:b3:63:1f:12:f3:f6:07:f6:7d:96:
eb:57:e2:01:86:5b:9c:86:9e:5d:ac:8c:21:6d:f9:17:67:87:
37:52:c2:c7:a5:c6:31:93:16:7d:7c:61:43:b9:f2:9d:83:c4:
90:22:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client