Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: YYE2lVZfvkb35w5whqwPuFdeN50MpmckM9sIf6O5vkg=
Subject key identifier: FE:A9:FC:2E:A0:CA:CF:3C:0F:7B:4E:0E:D7:24:F6:3A:77:73:94:C1
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0199172D1563B9F045CAADA1328510144E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 08F9
Signing time: Fri 05 Sep 2025 00:00:54 +0000
Manifest this update: Fri 05 Sep 2025 00:00:54 +0000
Manifest next update: Sat 06 Sep 2025 00:00:54 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: 9KQHyc6Wyw57uyYGY7DJ2oDx0jYuhLZRMf1QEkebwio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:15:63:b9:f0:45:ca:ad:a1:32:85:10:14:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Sep 5 00:00:54 2025 GMT
Not After : Sep 6 00:00:54 2025 GMT
Subject: CN=fea9fc2ea0cacf3c0f7b4e0ed724f63a777394c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:5e:d1:75:67:6b:ce:f6:da:2a:1e:d9:ab:
c7:35:0b:f1:a4:82:b9:ce:2e:bc:89:50:4d:2e:45:
60:4d:68:33:ab:2c:91:6d:b7:e9:93:42:10:92:b4:
df:3e:c3:e7:74:e8:16:6b:a2:2b:10:56:d8:c9:85:
27:9e:03:4b:12:49:10:f8:70:b6:ac:c7:65:cf:04:
9f:5a:2a:39:14:ae:c3:3a:a3:8a:a5:c7:7a:a5:58:
06:fa:77:14:19:f2:86:b1:3a:bb:c3:1c:b8:20:24:
e7:75:fa:54:36:f8:a5:fc:85:51:a5:fd:9b:c2:cc:
66:34:02:32:f6:0b:04:8a:e1:a0:c3:93:22:15:2f:
5a:cc:a8:0d:de:9d:f8:a9:18:16:2d:99:cd:51:bd:
e2:e2:ec:ce:98:97:b9:6b:ba:3b:e9:34:d3:77:3a:
2e:23:b1:37:3a:ea:11:17:99:bc:86:85:b8:90:f0:
ed:ba:db:92:de:b9:ef:d7:37:df:89:06:b8:7b:db:
12:11:2b:7b:0b:95:d9:fc:f9:6c:ff:e8:a3:e2:7a:
6e:6c:29:09:bd:41:b3:2b:f4:4d:20:77:5b:5c:61:
ad:bd:0d:75:16:71:2b:fe:c5:cb:7f:51:90:3e:59:
bf:86:6d:1e:4d:7d:cb:e4:5e:d0:74:7c:c6:59:16:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:FC:2E:A0:CA:CF:3C:0F:7B:4E:0E:D7:24:F6:3A:77:73:94:C1
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:88:a3:08:25:d7:3b:7b:f0:54:5c:66:e8:f1:18:32:ad:
60:d4:29:11:51:4d:a5:38:80:a6:af:2a:ed:0c:64:76:68:89:
66:a4:15:10:57:da:9c:8c:71:08:74:44:38:12:4e:65:91:47:
80:5a:c1:00:d0:e8:84:74:93:37:b1:83:c0:6b:ff:45:1c:33:
b3:f7:e7:cb:46:fb:09:4a:92:fb:fa:d2:62:49:bd:03:65:c6:
d1:e9:d3:af:94:91:14:db:60:45:4d:31:cd:51:23:d6:e7:df:
2f:d5:13:17:c4:59:22:cb:dc:e8:8e:77:d2:b4:6a:b9:97:08:
c0:22:fd:79:65:00:8c:3b:b2:97:0d:c6:de:da:f5:1b:c4:87:
43:99:eb:04:c0:91:65:d9:40:37:29:e6:4b:a0:7e:48:df:3b:
71:28:40:83:02:88:06:2e:be:39:cf:48:6a:51:ac:89:86:c1:
96:87:50:29:a1:6b:1d:fa:5a:48:4e:d2:5f:63:4c:33:6f:af:
fa:db:48:5d:01:c9:7d:7e:8e:41:87:86:e7:7d:bf:35:a6:65:
99:05:ee:99:30:57:b7:8e:35:29:ac:b6:c3:b0:0b:47:06:d1:
60:15:e8:82:50:00:5c:80:a9:b5:61:3d:87:f0:3d:03:b9:52:
eb:6b:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:37 2025 by rpki-client