Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: NbmRPRVORQu+w3emIxeiyqtJswVRuH46z30vRjbR1PE=
Subject key identifier: 19:EA:C2:FD:08:39:4F:98:44:67:2E:55:90:F4:C6:86:77:50:DB:39
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01991EAF8BB128A5163405EAD2E90110EBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 167A
Signing time: Sat 06 Sep 2025 11:00:45 +0000
Manifest this update: Sat 06 Sep 2025 11:00:45 +0000
Manifest next update: Sun 07 Sep 2025 11:00:45 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: +5Foaqf6mHnggKYK/oPqz+1oto2AMOZi5flYMX9WOeQ=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:af:8b:b1:28:a5:16:34:05:ea:d2:e9:01:10:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Sep 6 11:00:45 2025 GMT
Not After : Sep 7 11:00:45 2025 GMT
Subject: CN=19eac2fd08394f9844672e5590f4c6867750db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:bd:7a:18:8f:69:53:f5:37:ce:2a:78:dc:
5b:ae:db:c3:ba:27:e6:77:92:b4:26:ac:a5:2b:9d:
b6:4f:3f:bc:86:05:e2:ed:df:10:1d:88:4a:d1:4a:
29:dc:9b:2b:6f:db:38:31:87:1f:38:c5:7b:50:3d:
b9:c0:c5:30:05:0e:fb:67:23:83:7b:23:27:f1:c1:
35:62:5c:cf:52:34:ec:db:3a:8d:cd:38:0f:8a:c6:
4d:32:72:84:96:14:27:fd:98:57:47:ea:6d:fd:ca:
8f:7a:e3:da:bc:7c:e4:f8:cd:be:06:0f:59:37:de:
3b:b5:dd:0b:ee:2f:e4:ba:ac:6e:38:f7:f4:51:47:
4f:ba:6a:9b:9f:b6:4a:c8:67:5e:8d:9e:7b:52:2c:
bb:41:dd:dd:54:50:a3:d2:2e:f5:e5:a2:cd:1f:ee:
d9:6b:c1:90:3b:be:9b:ee:33:f1:2f:42:28:80:0c:
67:3a:86:c8:75:06:a0:da:c9:53:45:9d:fc:bb:e5:
39:92:ee:b6:da:bf:a0:a1:ca:b0:9e:5e:77:ca:42:
dc:69:d4:c0:d6:6e:8b:eb:cc:31:e1:8f:c1:82:13:
7d:2d:ff:01:6d:e4:c4:1e:5f:f5:99:cf:40:b8:6b:
6a:68:d0:9d:5b:5f:ea:63:88:a1:eb:91:24:93:d1:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:C2:FD:08:39:4F:98:44:67:2E:55:90:F4:C6:86:77:50:DB:39
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:97:e8:3d:bd:2e:f0:21:28:2b:10:fa:db:f6:21:08:bc:d1:
aa:eb:ea:92:86:84:0e:18:3b:11:20:93:b1:18:d9:15:0d:f8:
78:40:84:a3:7d:98:29:93:56:6f:1b:2b:e8:28:99:25:a9:72:
38:24:28:59:9e:d3:5d:a1:b8:c7:38:d6:b7:b3:58:4c:4c:24:
dd:1c:ab:e7:69:40:71:86:bc:31:fb:f1:6e:d0:1e:25:73:66:
cd:59:43:4a:0d:ed:fe:cb:1c:a1:fb:5e:fa:e4:d2:01:24:7b:
d1:cf:ab:db:77:71:95:39:b6:38:27:cb:3b:c8:e8:62:1f:38:
05:3c:90:85:0c:06:9e:96:11:39:df:83:9a:d5:99:f6:ba:00:
00:d8:25:44:01:d5:56:85:de:32:64:f1:6c:90:56:97:59:be:
29:b5:f9:32:e3:b7:52:84:66:7a:ac:e2:40:bb:55:31:c3:67:
00:64:39:57:a9:ca:30:33:28:57:59:c2:44:b1:3a:ff:81:81:
dc:f6:0a:04:f9:06:90:2c:19:d6:b6:71:47:c2:a2:6a:45:b9:
79:16:aa:95:a0:7b:e7:74:e5:1f:ae:0d:3f:06:96:14:3d:52:
36:f5:44:ab:e8:d6:24:c6:f8:3d:a6:0e:2c:53:ff:32:ef:fc:
55:45:bd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:16:53 2025 by rpki-client