Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: pMJDOQIPbN/9F+lD4i+89da+HqiYHaFTEJMooiJBPOI=
Subject key identifier: 60:D7:B4:ED:AE:4B:16:44:4E:0A:FE:71:90:2A:0E:C3:56:BE:8E:2A
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0199172D393BB832532B46B3B25209ADFE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0244
Signing time: Fri 05 Sep 2025 00:01:03 +0000
Manifest this update: Fri 05 Sep 2025 00:01:03 +0000
Manifest next update: Sat 06 Sep 2025 00:01:03 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: 9mtnzpQfjLoeJcHW9bN1HIxy03pc4AM03DpZPw8ZnIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:39:3b:b8:32:53:2b:46:b3:b2:52:09:ad:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Sep 5 00:01:03 2025 GMT
Not After : Sep 6 00:01:03 2025 GMT
Subject: CN=60d7b4edae4b16444e0afe71902a0ec356be8e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:b7:df:45:dd:fb:31:d7:6a:59:11:22:89:
58:e6:8d:01:a5:e0:75:f7:aa:af:04:24:a8:26:68:
0b:13:3a:9d:8f:c6:62:c1:3f:7a:36:08:6c:76:55:
19:2f:c0:cd:c0:2b:5f:af:8a:c1:4a:8a:37:0b:00:
f0:bf:14:d6:98:5f:d0:7c:ad:e4:52:fc:4d:c4:bf:
c5:45:33:a9:57:ed:ec:16:a1:65:c3:5b:7c:29:3a:
47:08:0a:0a:ce:c7:a3:86:12:1f:d3:56:83:2d:91:
a5:6b:0b:69:ab:8d:be:9f:8c:54:9a:2b:82:25:ab:
80:a1:12:47:47:2d:81:ab:4f:5e:c8:0c:14:8d:10:
34:f3:af:8f:ca:82:d3:93:95:da:8d:53:96:54:bd:
01:67:e6:69:54:0f:18:7e:da:0e:9c:26:02:f1:5b:
18:6f:59:96:e9:9a:e2:d7:fc:25:d8:1c:14:ef:f5:
c9:5a:ab:08:15:00:cd:1a:6c:1b:fd:8b:b8:62:8c:
bf:1a:36:3f:06:3e:ea:31:07:35:e6:2b:60:32:a0:
af:7d:5d:46:3a:4a:48:df:0b:9e:f4:7d:b4:21:34:
7f:45:48:a7:bb:bd:bd:d9:05:fa:8f:75:30:08:c8:
2c:31:74:8f:00:d3:1b:cf:a2:33:07:b2:0f:f3:6e:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:B4:ED:AE:4B:16:44:4E:0A:FE:71:90:2A:0E:C3:56:BE:8E:2A
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:52:f0:75:b8:80:35:16:5a:9b:3d:fe:27:76:24:b8:3b:1d:
a0:8b:b0:92:35:34:6e:80:fb:70:33:4f:05:19:52:2c:c1:c0:
b8:52:13:15:7b:58:3e:8f:b5:2d:ec:0c:6d:ca:bb:fe:9d:cc:
28:5e:69:df:11:e5:d6:2d:18:14:49:13:97:68:08:a6:be:3b:
da:1a:f3:dd:2c:f9:22:b8:24:89:a8:d8:1b:48:4d:79:43:05:
c7:22:d1:01:5f:7e:20:89:5a:62:dd:eb:77:ef:d4:6a:5d:c2:
06:48:27:f4:e4:86:51:3d:d3:fc:af:1a:5a:a4:89:d5:e2:6a:
11:b7:bc:e4:7e:0d:c2:58:71:ef:a4:47:25:4b:1d:e0:90:9c:
6b:a8:37:b7:c4:59:78:08:b0:13:ea:63:92:97:3f:7b:03:d8:
be:5d:67:a8:d0:cf:bf:26:36:93:f5:ef:3c:ed:48:3e:d9:06:
c7:85:de:02:fe:e6:f7:3f:6c:84:84:e8:17:d9:6a:b7:cd:46:
16:f5:f9:3b:2b:50:5e:37:48:d4:77:01:a8:da:fa:ac:ee:57:
fc:3d:55:b4:cb:19:8f:eb:81:eb:ce:01:a1:f8:3e:01:20:f2:
c6:a3:02:fb:0c:ce:89:49:8b:40:cb:60:76:ee:53:2c:e3:66:
81:eb:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:54 2025 by rpki-client