Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: J2QwVPoGfidcyhvUHQclt/PUPJ6UPNfGvBaC+d/vYvs=
Subject key identifier: 98:BA:49:D1:1F:7F:1C:16:7B:6A:BD:00:A7:D3:76:A9:02:61:A8:80
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019926D6CB01F36858E53168989B89D61495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 101C
Signing time: Mon 08 Sep 2025 01:00:34 +0000
Manifest this update: Mon 08 Sep 2025 01:00:34 +0000
Manifest next update: Tue 09 Sep 2025 01:00:34 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: yfwNw2OhedzZrFuBhTXbI7zGdKg+yaLetL0U/FORgo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:cb:01:f3:68:58:e5:31:68:98:9b:89:d6:14:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Sep 8 01:00:34 2025 GMT
Not After : Sep 9 01:00:34 2025 GMT
Subject: CN=98ba49d11f7f1c167b6abd00a7d376a90261a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:7f:f2:41:42:eb:64:aa:71:0a:ef:52:ce:
96:79:b6:85:78:42:60:72:ca:f0:b3:fd:54:f2:96:
91:8b:3e:a1:ee:57:12:48:74:ab:8e:66:31:53:b6:
e8:0d:8c:62:68:3f:22:86:f4:72:bc:11:21:ae:14:
7e:23:48:55:12:96:a4:1c:30:d5:49:77:8f:93:67:
31:f1:f7:92:f8:f1:d8:38:9d:5a:ed:24:84:33:f1:
82:88:f0:ef:46:2b:e7:21:b3:3c:5c:a1:eb:2f:df:
64:f2:27:87:61:d6:4e:07:53:3c:96:38:d0:84:70:
2e:e1:27:a4:f8:3b:41:ba:11:12:e0:a6:86:8b:6d:
f8:e2:a3:6a:cd:55:d0:64:01:93:81:64:53:f8:b3:
fd:1f:b6:cf:ab:fd:7a:b2:e2:93:5f:c6:41:b9:c7:
72:08:e5:1f:f0:ff:c8:78:a2:78:d8:91:5f:79:cf:
83:ff:7e:4e:c6:ce:4b:db:07:b6:87:a7:74:06:a4:
68:1e:13:52:43:86:30:29:24:f6:5c:5f:d1:61:f1:
62:0a:b4:80:2c:d9:e0:4e:2d:b0:00:40:71:02:89:
16:dd:c9:cd:55:11:73:9b:83:f3:25:93:53:a3:a8:
60:4f:f5:17:bd:85:5c:19:7b:b6:71:3f:6e:1a:25:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:49:D1:1F:7F:1C:16:7B:6A:BD:00:A7:D3:76:A9:02:61:A8:80
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ca:a4:00:55:97:21:8b:b1:1e:6f:2f:20:d1:32:86:44:bc:
f2:f9:45:cb:1d:77:28:74:fb:97:9f:cc:20:47:f5:13:e2:8e:
63:44:82:86:26:da:d9:1d:47:6d:00:66:4e:37:48:da:d6:15:
d7:a9:a4:3f:3b:90:a3:4f:1c:cf:85:07:db:a8:4d:2b:72:dd:
f5:36:91:25:62:65:b5:59:87:47:41:ea:c8:31:e8:76:a9:94:
09:11:79:97:90:94:28:14:3f:d0:09:52:b2:38:a5:83:be:aa:
8b:22:e3:43:a4:ea:cb:2d:db:29:72:34:62:ba:9b:95:a4:9c:
2b:0b:df:4d:f4:fb:00:ee:3d:8e:c7:9f:00:58:b0:49:c5:3d:
93:ce:59:27:d6:21:db:87:bb:c1:5c:63:68:8b:8d:47:91:cc:
27:4b:1c:f1:86:93:80:b0:aa:76:4d:33:e3:22:dc:b8:94:b1:
85:2c:5c:7f:de:f3:0b:91:df:9b:9a:9d:bb:91:9a:39:e2:f5:
28:29:a8:ed:ea:b1:aa:13:7b:b4:ce:e3:02:a7:3f:42:90:22:
c8:8d:3d:70:c6:24:6b:55:1d:9c:b1:76:29:58:c7:eb:a2:8b:
72:b5:b7:ba:f8:d3:89:2b:7b:6e:de:4d:cb:9f:0b:82:f1:41:
05:27:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:45 2025 by rpki-client