Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: CjFR6yBxnvGEJGH2kyQN+lBnnLzG6ZGs8N49vTkfyjg=
Subject key identifier: D2:14:6B:02:4D:2A:E9:09:DC:F7:FA:7A:00:4E:D7:D5:1A:7D:CF:D7
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 0199228CA79C664F8070BD84946645A6A0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 122C
Signing time: Sun 07 Sep 2025 05:01:07 +0000
Manifest this update: Sun 07 Sep 2025 05:01:07 +0000
Manifest next update: Mon 08 Sep 2025 05:01:07 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: ZttJ700riTl2FQIGdyAw1AA1aaKpHDZoOCQpKhP3tfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a7:9c:66:4f:80:70:bd:84:94:66:45:a6:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Sep 7 05:01:07 2025 GMT
Not After : Sep 8 05:01:07 2025 GMT
Subject: CN=d2146b024d2ae909dcf7fa7a004ed7d51a7dcfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:c9:0f:9b:9b:89:65:4a:a7:2d:37:51:48:
3b:10:5e:a7:2a:43:01:a9:f2:9e:6a:14:d0:db:89:
0c:a6:fc:9f:d4:94:b8:69:dc:ec:68:3a:65:86:df:
10:36:e3:a1:ff:3d:d1:ef:91:35:2b:f0:83:81:6a:
9f:9d:b8:1c:3b:6c:6f:f4:b2:57:a0:b6:47:fb:3b:
62:30:be:30:6a:b9:72:74:74:8e:de:fc:37:2a:fe:
e8:8c:43:ac:0c:c7:f2:76:26:64:33:b1:d9:4b:d4:
49:41:36:b8:13:ce:d5:28:10:58:90:a9:33:16:ee:
06:0d:77:8e:91:aa:a5:5e:72:ca:54:84:a6:ab:93:
3e:50:52:7f:67:b3:b4:34:6e:62:ee:e3:55:51:ba:
b6:52:c2:4e:55:20:40:f2:3c:86:88:ca:f6:fd:fa:
03:bc:27:b0:27:df:0f:7b:2a:a6:69:d1:24:9d:55:
d2:c9:f4:64:8d:16:ee:f1:e0:fa:41:51:7f:c9:b8:
1f:64:16:13:ca:16:4f:86:11:40:16:4e:aa:5c:f2:
28:32:ed:68:03:79:c1:da:14:22:05:89:9e:e6:07:
d3:3f:a1:1b:f9:31:fd:0f:4f:ac:ba:d4:81:36:b5:
78:8f:06:5a:eb:38:66:ef:ef:c8:0c:0f:56:c0:c2:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:6B:02:4D:2A:E9:09:DC:F7:FA:7A:00:4E:D7:D5:1A:7D:CF:D7
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:aa:57:48:2c:c3:84:a9:a7:91:41:55:63:8e:d0:7d:77:4d:
52:6d:5f:32:4d:47:7d:ba:62:bf:02:fb:d0:2a:26:8d:a9:54:
94:94:d5:73:20:fd:e7:03:3c:1f:29:13:d6:7d:5a:73:76:b3:
48:69:e0:8a:55:62:1c:dd:64:53:9e:76:a7:fb:a8:52:7a:9e:
d9:80:eb:69:fd:c8:9c:65:67:5d:08:dd:0c:e2:4b:d1:80:86:
b2:54:d0:00:4a:b8:d8:c3:31:e4:26:a8:ee:7a:a1:cf:43:26:
17:f9:0b:50:f1:b9:f1:6f:05:0f:ff:5b:bd:88:88:6a:e2:cd:
c1:2b:49:d3:ab:dd:f3:4f:a4:0a:52:62:b0:2a:13:dd:b5:20:
34:b0:cf:05:42:da:68:ae:7d:30:26:61:e2:5d:7b:9f:33:e3:
ed:8c:19:d3:ac:eb:3e:41:27:8d:07:86:81:2f:fc:b7:12:85:
e7:ac:c4:7c:4b:a0:a9:cf:e9:af:26:1b:7a:0a:ca:fa:83:83:
c2:65:f6:57:ca:97:ce:07:1f:77:29:d4:cd:40:45:13:4a:43:
3c:03:49:ca:6a:24:46:4f:b1:a6:bf:0f:93:0d:1a:ac:bd:a0:
6e:83:da:b1:45:31:c2:16:38:4b:e1:0a:b3:03:07:cc:ec:bd:
e8:61:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:11 2025 by rpki-client