Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier: QvJbOIsklRw+Moos87RmtRIpH+yvnZspMWRwj2azHvU=
Subject key identifier: 2E:F4:80:EC:12:DC:AC:CA:C7:B6:F9:6F:35:B3:97:EE:25:B3:44:6E
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019924B19AA715028215D903DDDD03DE3343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 15:00:43 +0000
Manifest this update: Sun 07 Sep 2025 15:00:43 +0000
Manifest next update: Mon 08 Sep 2025 15:00:43 +0000
Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=)
2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: oB9Arby5Tpz+CJD3SRv/Ix2kb0tTZvn4aYCJIk3Mns4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:b1:9a:a7:15:02:82:15:d9:03:dd:dd:03:de:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Sep 7 15:00:43 2025 GMT
Not After : Sep 8 15:00:43 2025 GMT
Subject: CN=2ef480ec12dcaccac7b6f96f35b397ee25b3446e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:6a:b9:3a:96:19:d3:e9:e7:1d:4f:88:2e:
0f:fd:0b:eb:bf:ff:eb:d0:8a:e1:5a:7b:51:ca:4a:
28:db:44:35:50:8c:b7:ea:dd:d1:db:49:da:32:a1:
58:87:f5:68:6c:ec:55:35:9e:9b:3b:aa:d4:37:2f:
ed:67:ed:d7:1d:14:c6:ff:7e:a5:f2:c8:2c:f1:9a:
cd:a7:28:ce:4c:d1:8a:74:39:cf:c1:ef:11:2f:9d:
ca:70:a5:a4:3e:1d:fe:22:13:6e:e7:5d:a8:20:83:
f4:1a:70:bc:0e:d7:33:b6:c8:b6:76:3c:fc:b1:88:
fc:31:b4:fc:91:ea:2d:67:e8:a4:eb:61:e0:0b:ab:
3e:a9:19:89:e6:7f:48:58:0f:66:74:f5:00:3a:c6:
d4:45:7a:40:ce:83:d1:f3:91:59:c7:27:0b:d2:e0:
34:82:93:34:50:bc:1b:90:5e:6a:8d:11:10:99:d8:
01:d1:84:68:4e:43:11:6b:cc:08:4e:8a:78:56:8f:
6d:be:75:97:23:e7:91:8e:f7:02:30:02:1c:74:33:
ff:5f:6e:f4:5d:3b:75:d3:38:5d:0f:c5:ae:62:e6:
06:91:1f:ad:ad:e4:fc:b0:14:d3:8b:ad:19:c7:a1:
5a:b7:b0:c7:42:35:b4:bb:13:82:34:45:94:32:90:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:80:EC:12:DC:AC:CA:C7:B6:F9:6F:35:B3:97:EE:25:B3:44:6E
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:0f:cb:0a:81:a7:06:3f:43:34:7a:7d:0d:1b:c1:46:82:
de:dd:f7:0a:92:71:0d:f6:74:7b:e7:53:2f:97:af:ed:15:60:
6a:d9:5e:0f:65:78:f3:ed:43:83:0a:ca:6a:cf:4f:bc:61:0d:
db:d1:ad:ce:3b:d6:43:57:8e:80:30:6e:9b:c1:11:65:98:75:
55:f1:75:cf:16:0e:7b:d5:ef:9d:66:59:98:5c:9f:43:78:8f:
98:ab:58:3c:e2:7a:64:3e:81:8e:63:a6:f8:ea:43:82:29:e8:
06:ca:c1:44:07:e1:0f:c9:4e:50:03:55:e0:24:51:52:b2:90:
d5:e5:42:d3:70:15:52:78:cc:a0:45:9c:4f:2d:6f:1a:20:c7:
3f:1c:b3:6b:fd:8d:1b:14:a1:e1:ff:e5:10:69:19:7e:33:e9:
79:0d:b0:95:fb:1f:8b:e1:3a:cc:47:5b:72:ba:1b:68:e7:6a:
7e:f2:0a:0e:a3:0d:60:f1:66:8c:66:aa:93:5b:fe:2e:74:64:
04:aa:ab:b8:7f:d8:c0:72:93:5e:2b:66:0b:4e:b8:45:0f:3a:
78:0d:ca:b2:9d:f0:28:a3:9e:39:5c:5a:04:0d:bf:e6:e0:21:
02:fa:e9:f9:3e:db:7c:59:61:4f:fe:ac:33:aa:35:4d:77:63:
f6:34:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:59:38 2025 by rpki-client