Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: VwvMoS146hUvWuNgQDxEgzyyWqn+xzIAsEju1WdIvKo=
Subject key identifier: F4:D2:EE:CA:A3:E8:F8:1D:1F:76:C0:29:66:F4:C8:27:4D:DB:41:17
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0197CB02D21F0A8E849FB70CC900DC7158AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0198
Signing time: Wed 02 Jul 2025 12:00:49 +0000
Manifest this update: Wed 02 Jul 2025 12:00:49 +0000
Manifest next update: Thu 03 Jul 2025 12:00:49 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: wwAljaMiy++01Z2itlLlsUcpM9NKVrRNMPlN8OlEPzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:d2:1f:0a:8e:84:9f:b7:0c:c9:00:dc:71:58:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jul 2 12:00:49 2025 GMT
Not After : Jul 3 12:00:49 2025 GMT
Subject: CN=f4d2eecaa3e8f81d1f76c02966f4c8274ddb4117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:c8:d6:37:b1:bf:98:73:08:0f:4a:48:63:
b9:33:23:1a:f0:ba:71:99:e0:ac:27:0e:a3:df:dc:
d0:3e:c8:37:98:ee:d8:d2:9c:e1:f6:0a:35:63:96:
26:bd:19:ba:2c:28:e3:fa:1f:c0:aa:ef:66:ea:b9:
5c:5f:88:b7:51:b9:b1:c9:2e:0b:4f:e4:dc:7f:b9:
52:07:b6:c6:79:84:e8:0e:f6:e2:74:14:10:c7:a2:
85:a2:3c:a0:6c:e7:80:c9:c8:c9:02:36:fd:09:30:
48:90:9d:b0:34:01:c8:c8:0c:24:cd:e0:ef:c2:67:
7a:7d:7f:59:47:da:43:68:59:c5:70:49:03:ff:af:
c4:91:5f:97:a3:93:1d:4a:0e:47:a4:95:ff:18:42:
c0:03:08:8e:81:41:54:e0:0d:62:47:54:50:08:4c:
b8:34:35:a9:ef:82:f1:5d:b9:a9:27:22:33:dd:1e:
c3:42:dd:d5:d9:85:98:cd:95:17:e9:8c:e3:c3:da:
1a:38:c3:fa:37:dc:3d:2a:6c:6f:66:f9:0b:c4:ba:
4c:6e:ab:46:c7:d0:8e:d9:dc:27:19:0f:b6:52:b1:
3b:ba:e7:3c:13:45:0f:53:11:34:f1:32:d8:6b:51:
87:13:5e:5a:b7:0e:1c:62:16:39:61:d6:69:71:a3:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:EE:CA:A3:E8:F8:1D:1F:76:C0:29:66:F4:C8:27:4D:DB:41:17
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d9:61:5b:fa:33:db:2a:16:f0:4b:e0:39:26:ba:dc:1f:9c:
5b:af:7d:eb:75:f7:c4:76:e6:46:56:c1:10:9b:bb:f4:4e:af:
50:05:d6:9c:54:7c:2f:df:89:ec:4a:fb:e5:23:77:ed:c4:6d:
08:14:51:70:ee:2a:9e:39:63:5e:00:9d:ef:78:67:fc:70:64:
ad:27:df:4a:86:a9:0e:44:f5:f0:e6:30:0f:b5:6d:5f:cc:93:
72:8b:a8:d8:98:e1:3f:93:06:81:18:c5:47:1a:3d:58:ef:d5:
42:aa:19:ea:92:6b:ab:05:24:62:46:fe:b0:b3:60:99:4b:bf:
32:0f:13:dc:5f:17:26:f8:b3:33:ca:0a:c7:97:bc:c5:50:8b:
e3:d8:d0:a2:2e:b2:ce:32:5b:2d:77:65:3c:d5:bb:ad:7b:39:
84:52:c6:9c:d3:f0:0e:0c:6d:a4:78:7e:90:58:94:c7:3b:29:
49:79:69:7d:c4:33:d5:e2:07:c1:81:40:74:b9:4c:23:d4:9e:
7c:b2:1b:20:26:cd:11:14:13:8a:32:a0:43:24:60:a2:73:e7:
35:70:91:41:f5:f8:ed:80:54:e4:98:e0:72:76:47:21:3f:38:
fe:51:0c:13:a8:71:e5:27:16:72:88:ef:b5:97:1a:af:a6:c4:
4b:b3:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:21:25 2025 by rpki-client