Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: x1jyMOQdw3nMysw7K6IcrTIYruHXXkQ1gniQSJFPDPo=
Subject key identifier: 60:41:8C:0B:1A:6F:8B:A1:85:0B:CF:1D:73:21:8F:2F:3C:B3:0F:EB
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 019921B2460BDBDA02B0A4E2BD238E0A0622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 0387
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: 0AEGJX9PChmrbfCtmOo+RnIDS/a/X8O0+uqQ4agkUCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:46:0b:db:da:02:b0:a4:e2:bd:23:8e:0a:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=60418c0b1a6f8ba1850bcf1d73218f2f3cb30feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ee:9b:37:1b:e8:a3:be:28:21:da:c4:ec:0c:
d6:43:aa:72:c5:67:3e:80:a7:be:77:b5:44:3d:91:
89:c2:64:54:c4:98:43:63:64:66:09:80:6b:6f:fb:
b6:4b:3a:0e:53:ac:7d:13:ec:56:8e:95:de:50:77:
51:fd:0f:bf:dd:54:39:cc:99:7e:81:2e:74:f7:c0:
39:66:4c:b5:42:7e:db:a9:0e:87:3d:0e:13:ee:73:
0c:93:9b:3a:af:90:75:e5:48:47:de:89:12:d9:20:
06:27:d9:aa:53:43:62:ad:81:39:95:72:c9:69:e4:
c4:b3:d8:11:de:be:de:ec:e5:ee:d0:88:98:4f:09:
9b:2a:be:f6:0a:09:e1:c7:0a:ea:39:c8:13:83:77:
0d:91:61:b1:ee:c6:f4:46:10:43:1c:6d:bd:d9:c0:
e3:01:0c:d3:87:30:34:1d:fe:ee:6e:2f:d1:ac:4f:
36:f2:1c:1d:f8:24:ad:bd:36:50:b3:f1:6a:2a:d4:
65:66:19:fe:06:e7:b9:91:e3:3a:5d:81:e6:df:06:
49:8b:3c:f7:88:b0:00:72:3e:9f:71:7c:c1:98:75:
2e:67:eb:17:ab:7d:4b:c2:e4:5c:08:2c:e7:d1:18:
54:b3:7d:d9:8b:fe:59:30:4b:60:e8:21:34:73:cb:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:8C:0B:1A:6F:8B:A1:85:0B:CF:1D:73:21:8F:2F:3C:B3:0F:EB
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ea:19:8b:a4:ad:4d:b9:7c:a8:93:c1:ac:03:2f:5f:0d:9d:
f3:b9:af:dc:9a:8b:c0:02:89:17:0c:dc:e5:b7:39:40:21:47:
16:fd:e3:21:4b:36:39:48:1d:2d:12:bd:c3:4e:2f:18:48:9a:
1e:4d:f0:17:d3:18:9f:13:04:31:3b:55:5d:79:c6:37:6b:fe:
af:c1:ad:7d:65:ce:6e:17:6c:24:8c:2d:dd:27:d2:93:c3:58:
a2:aa:3d:69:e8:6d:fb:19:27:8e:3f:71:ac:ea:ba:88:3b:f4:
c6:c0:41:52:c0:6b:7a:65:8e:12:69:29:35:09:16:92:fd:75:
11:44:af:e5:3d:6b:7a:c4:ce:b0:a3:b2:00:0b:4e:ce:85:15:
7f:27:4d:56:f8:45:e2:fd:f0:fd:3a:55:d2:d0:a0:75:35:05:
b8:ba:c0:76:15:54:0e:a7:75:8b:26:31:76:97:8f:1f:c6:f7:
4b:dd:e5:b3:9d:a9:ac:dd:09:be:9b:86:b5:0c:05:65:d1:5f:
07:83:7f:3d:93:e5:6d:39:a0:85:1a:38:6d:06:c7:63:e7:be:
b7:28:2e:07:f0:17:0a:01:e7:ab:e2:e4:9d:2c:67:fe:dc:52:
e5:29:5c:f4:8c:a5:31:f3:74:49:ab:25:01:dd:4e:5a:95:82:
18:6a:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:40 2025 by rpki-client