Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: a6Wkq/TCY7WbZPWtqz2jUvmgumB2DVOt7vF9Jqa1DgE=
Subject key identifier: 39:9A:DD:72:DB:99:0F:D8:F4:31:E3:EE:AA:B5:3D:E8:25:EE:8C:6A
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019921B112ECF28AB7EC61871F6E8A91EE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:01:16 +0000
Manifest this update: Sun 07 Sep 2025 01:01:16 +0000
Manifest next update: Mon 08 Sep 2025 01:01:16 +0000
Files and hashes: 1: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: jeLSAlWVNr8Uc5DPBXgYUIcb32+5XkvWHyJxFTp3zEU=)
2: yz6_439OmIgbPGI_9SMl-hcB7SM.roa (hash: b+VVST8s13jCLV/LOSpCV8hcczaiQ8urh6lhnrg3Cso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:12:ec:f2:8a:b7:ec:61:87:1f:6e:8a:91:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Sep 7 01:01:16 2025 GMT
Not After : Sep 8 01:01:16 2025 GMT
Subject: CN=399add72db990fd8f431e3eeaab53de825ee8c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:f6:99:a8:ec:d6:d1:27:99:03:fa:a4:41:
d9:c1:b6:52:73:41:ed:c3:74:d8:54:d6:1f:01:22:
46:b5:72:b4:56:ce:28:42:8b:d8:8c:68:f5:8a:07:
c5:88:a9:55:02:b2:33:f2:5e:1c:69:b3:2e:7f:7b:
f9:39:45:d9:7e:91:53:bb:a5:75:53:55:66:2e:c0:
41:f7:87:1b:49:54:c5:f6:8b:fe:87:34:43:82:e8:
0d:57:d1:e1:71:66:4b:9c:29:3a:58:92:e0:16:08:
2b:e1:5d:10:ae:53:44:c7:e1:ca:e7:b0:36:09:27:
8d:36:4a:05:32:d9:8d:30:56:2c:d8:39:46:f9:45:
b5:87:63:d4:23:34:bd:5a:a1:39:ae:ab:ba:b8:0c:
e3:b6:45:c8:ff:0d:1b:84:b9:a5:3b:a7:01:e1:ab:
bf:e6:ca:05:e9:d7:61:20:a3:c1:1b:00:df:6f:91:
77:34:52:95:e7:93:f4:2a:e7:b2:b4:28:34:f1:3a:
e9:33:88:03:28:c5:fd:5b:db:de:60:74:2b:28:b1:
63:fe:d1:75:cd:ac:4d:d2:36:09:12:97:8e:4d:0b:
14:c2:a1:2e:62:c1:c8:87:d6:2b:62:f2:8c:cc:2b:
0b:39:c0:d8:a2:4f:68:3d:ec:9f:d7:5a:7b:9a:c5:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:DD:72:DB:99:0F:D8:F4:31:E3:EE:AA:B5:3D:E8:25:EE:8C:6A
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:35:c8:88:19:e0:20:cd:80:3a:dc:4d:76:b7:7b:81:23:
22:77:5f:e7:ec:3f:b5:18:fa:20:f9:d4:37:fa:76:76:59:6c:
33:49:be:a6:4f:97:da:b8:64:e1:6a:c9:a6:0e:3a:d2:67:27:
a4:c4:63:44:88:69:1d:24:90:84:42:ea:c2:e3:b8:55:17:9a:
ad:9c:10:70:94:e2:14:9b:a0:3a:db:5f:35:57:95:05:1f:c1:
8b:0f:2f:9c:10:08:13:bd:0a:ee:c5:76:10:9a:d6:73:2c:09:
5d:e0:1a:37:76:34:ea:a6:88:73:28:20:3c:c9:78:64:af:9f:
05:fc:74:1f:74:b9:7a:9d:60:f1:fe:13:84:50:45:2c:a0:4e:
62:01:4a:c4:96:29:86:71:1b:cf:e4:94:f9:6b:4f:37:d8:d3:
a2:bf:2f:89:92:bd:92:4c:f9:8f:18:38:13:36:ad:92:14:69:
e4:5d:d8:14:d6:0e:62:98:ab:95:a0:7a:ac:5b:41:52:a6:dc:
d6:aa:ad:fa:fe:76:8f:d1:fe:31:a7:cf:37:5d:c7:d9:fc:bc:
df:55:1f:36:e4:1f:17:99:83:d7:01:0f:ac:62:5b:84:66:36:
df:b5:f3:de:83:88:ac:d2:00:75:4a:42:3f:4b:3f:e6:ff:58:
9a:8f:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:32 2025 by rpki-client