Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: 71Tqtwm55Q7ZSqvaJag/FlWdxkExctLUp3GOadcZirc=
Subject key identifier: 8D:35:79:3F:52:CC:76:41:F8:BE:A5:64:35:58:38:7A:6E:3D:D2:09
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 019921B080C84FC15435E542DB15AE4A386D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:00:39 +0000
Manifest this update: Sun 07 Sep 2025 01:00:39 +0000
Manifest next update: Mon 08 Sep 2025 01:00:39 +0000
Files and hashes: 1: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (hash: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: rHwBfkMfj15H+8IrQUR5CLzFX7R/S+M/IzV74KZojzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:80:c8:4f:c1:54:35:e5:42:db:15:ae:4a:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Sep 7 01:00:39 2025 GMT
Not After : Sep 8 01:00:39 2025 GMT
Subject: CN=8d35793f52cc7641f8bea5643558387a6e3dd209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:51:a6:bb:00:86:1c:c7:d1:2a:bf:e8:3d:
d4:52:3d:a8:27:e7:65:2f:40:18:d5:13:85:12:bc:
4e:94:d4:49:e9:4c:37:d6:0e:8d:c1:92:34:52:60:
f4:f2:67:1b:a1:7b:0f:43:78:e4:e1:64:67:e9:96:
cb:b7:76:50:16:05:6f:f6:e9:b8:43:c6:85:7c:e2:
28:b5:ac:5d:2d:41:6a:90:8f:bb:9c:67:16:2c:c9:
c9:84:af:c0:36:5e:54:3d:ca:33:ad:c7:67:f2:9d:
28:b2:b7:7c:1c:a4:58:62:af:7b:d7:94:72:49:38:
87:a1:a3:49:37:3c:57:f5:85:fc:94:53:85:c4:32:
7b:5c:96:61:df:64:97:76:40:83:c6:68:5a:3c:74:
11:58:2d:31:03:2d:7a:f5:db:52:eb:1b:34:58:4b:
c2:af:54:f3:46:d4:f5:54:7e:27:16:ef:a5:dc:df:
09:cf:b2:b4:f6:ae:ca:0f:71:79:78:b7:fd:07:0d:
91:43:54:9c:e7:e3:e9:4b:91:b1:f2:d0:ae:61:b2:
77:0a:e2:d1:ba:9e:da:b2:40:34:27:ec:d1:f4:39:
70:3d:91:8a:6c:75:c3:ea:3e:30:86:28:a0:bf:92:
06:2f:c8:88:07:eb:7a:3f:5a:4a:de:df:54:57:52:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:35:79:3F:52:CC:76:41:F8:BE:A5:64:35:58:38:7A:6E:3D:D2:09
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:34:01:03:e7:a9:c6:dd:77:71:a6:00:14:7d:8a:a0:d9:cb:
83:fc:26:12:02:53:f0:2d:4c:13:20:75:d5:78:8f:23:5d:46:
ab:f4:30:4c:7c:b6:6e:90:e7:cb:f7:07:c6:b3:7a:c3:5a:88:
4d:54:70:18:8d:46:d3:48:3c:4d:39:cd:65:9c:dc:6a:ad:8a:
f1:5d:09:e8:b0:0d:88:b5:ea:f3:88:52:7c:68:5d:e4:d1:29:
01:20:13:f2:c2:db:17:bf:a8:63:35:27:f8:33:c7:6b:e1:63:
1a:55:aa:c6:ed:2a:ba:d0:0b:d9:5d:16:da:10:1e:e0:2b:a8:
ff:66:24:a5:a8:9c:bf:72:60:77:d5:c9:d8:8c:a6:ae:98:fb:
5c:c9:2a:42:d8:0f:d2:19:e3:f6:41:5f:13:e7:f4:31:25:70:
b9:47:10:45:27:62:fb:d1:60:61:13:fa:e4:19:d6:85:22:8e:
3f:2a:6f:0e:76:ea:90:3d:a1:d4:df:81:21:15:15:04:db:e0:
15:c5:c2:24:f3:1a:64:f8:96:35:b0:ae:c0:c4:32:1a:83:22:
ff:8a:23:bb:35:9a:dd:1c:fe:85:de:0b:65:2f:46:c3:13:0f:
6a:83:d3:dc:a1:39:4f:8b:27:4c:41:ed:a8:8d:5a:08:0a:d3:
c8:c0:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client