Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: UJ1NnZyf096GtSDjLBBv/ilbZxu3JsOQc0iMFzu62qU=
Subject key identifier: 22:0B:75:0D:1F:7F:63:40:21:EB:FA:8C:18:1D:0C:B4:17:52:B4:8C
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01992A7D1289C7ED6A6FEF5B808C792A27DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1679
Signing time: Mon 08 Sep 2025 18:01:03 +0000
Manifest this update: Mon 08 Sep 2025 18:01:03 +0000
Manifest next update: Tue 09 Sep 2025 18:01:03 +0000
Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=)
2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=)
3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=)
4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=)
5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=)
6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=)
7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: +OucWM/4AwUS3G6PkdLWdc3QH9XI6COXXwOnqEc+DJU=)
8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:7d:12:89:c7:ed:6a:6f:ef:5b:80:8c:79:2a:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Sep 8 18:01:03 2025 GMT
Not After : Sep 9 18:01:03 2025 GMT
Subject: CN=220b750d1f7f634021ebfa8c181d0cb41752b48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:8a:0d:bb:00:cf:b2:0a:ca:42:4e:0e:ca:
30:8d:09:d3:d6:c4:d6:fd:95:d6:24:6e:47:f8:2b:
e8:e3:6e:c4:82:4b:97:82:0a:9d:38:e3:c6:27:96:
dc:a2:51:0c:8b:f0:9e:ee:7f:d1:ea:e6:b4:d4:9a:
3a:b4:60:67:13:b4:81:c2:29:48:b5:98:29:06:48:
97:8d:0d:d7:06:cf:44:08:59:cf:a6:76:24:a0:64:
b9:08:c4:3c:f6:20:ce:43:4d:bf:22:a2:33:a2:4f:
56:30:c8:18:15:94:fc:4e:15:2b:d9:3b:e9:78:59:
92:b3:5c:fc:b4:d0:ed:65:db:62:6e:7e:db:eb:81:
9e:ce:ce:79:06:a3:b5:9c:e1:2f:75:a0:c3:3b:b9:
d3:03:b4:70:cb:ab:3b:c5:96:2c:52:c5:18:f8:e0:
ad:80:f1:e3:29:85:dc:56:63:ff:05:d5:bb:98:0f:
ca:46:3c:a4:75:d6:e5:b8:22:cb:9c:e7:f6:0a:c3:
1b:09:49:f6:54:c7:03:37:78:0f:96:0c:67:93:cb:
71:ea:8c:d3:32:e3:26:01:a8:53:2b:5b:d8:74:dc:
40:92:db:8a:e9:e3:e2:c3:96:59:ae:28:41:bc:01:
6a:5d:14:1f:47:44:96:ae:9f:8f:52:17:c4:39:2c:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:75:0D:1F:7F:63:40:21:EB:FA:8C:18:1D:0C:B4:17:52:B4:8C
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9d:8d:ab:e7:96:67:39:d4:98:f4:72:75:3d:9d:9d:f2:0c:
b1:95:05:05:90:d3:55:d0:e2:1f:c9:1e:f5:9f:c8:fe:63:e8:
b6:e9:2d:33:db:e0:93:86:cc:9f:6d:59:12:7d:9d:b2:d1:db:
2a:ac:9d:3e:e1:2b:5d:90:12:00:3e:ee:a2:c4:7f:0c:be:3b:
50:47:70:4e:ee:7b:b8:f3:b4:4a:e6:82:d2:1c:55:8d:90:b5:
59:cc:58:0b:c4:5c:95:4e:88:c0:5a:e0:ec:4c:d2:11:9d:2c:
18:74:55:4d:ad:a7:43:20:00:c5:2c:0b:84:51:c2:e4:24:06:
f3:c7:f5:2c:0b:c5:d6:63:48:c8:06:6c:43:a3:9c:5a:30:68:
e4:11:d4:05:a0:8f:50:cd:02:f2:f9:27:f6:59:eb:1a:7e:ba:
39:da:16:6f:83:52:c1:77:82:9d:b1:54:0d:cc:1f:cf:33:6d:
35:e7:f6:5e:e3:5f:8e:15:a7:e3:0a:09:bb:28:0d:5f:f2:a7:
d4:b8:19:cb:35:5e:e6:74:99:96:e7:c3:58:46:e5:de:b4:a5:
d8:33:ab:4e:86:0f:b4:58:42:96:39:f2:02:31:7a:4d:73:d1:
dc:64:bb:26:02:24:48:55:60:0f:0a:4b:d2:45:1c:43:d8:90:
ce:90:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:01:05 2025 by rpki-client