Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: jY2GL9t9PCsqpJiNffoMcnFLBgL17/iADT04PIJeVbg=
Subject key identifier: 29:D0:DC:93:31:3F:A7:0F:B6:1C:7D:25:EB:EF:4E:E1:B3:28:7C:23
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019923312C0E96D17B5FB6CFAC72214C481E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0D5A
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: iSRW7QFInF+Abvu+RT9UpWlGTnJa+gQa42nRRvSi2W0=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2c:0e:96:d1:7b:5f:b6:cf:ac:72:21:4c:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=29d0dc93313fa70fb61c7d25ebef4ee1b3287c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:5a:98:78:20:72:24:ea:6a:f4:8a:83:7f:
5b:90:f2:73:29:60:49:65:66:50:2c:b7:af:9d:ae:
e4:19:90:e6:d0:7a:13:bb:a8:fc:74:2a:14:6b:be:
48:02:12:2f:49:04:a9:67:df:a4:7d:5e:7c:cf:82:
fc:59:96:4d:84:23:65:44:a4:8f:99:61:74:7c:65:
ec:7a:f9:2f:65:3e:2c:76:ce:8f:7c:be:60:e5:3f:
c7:d5:bc:96:39:c4:ed:3a:57:4c:b7:47:7d:a3:4d:
8b:da:59:a3:2e:e5:35:8a:fe:e7:27:a2:45:82:ce:
5f:8f:c6:9d:b2:b2:81:42:fa:4e:d3:f8:69:76:9e:
3d:b2:a0:26:37:39:95:e6:7c:50:58:4d:6c:dc:a9:
a3:61:c4:c4:67:ab:67:43:45:98:e6:0d:2a:d6:af:
b3:22:ef:d6:cf:0e:d0:fb:24:4e:91:14:7f:71:19:
4d:f1:a2:e7:43:62:f2:4e:78:fa:f1:5b:61:4f:3e:
22:47:86:d0:cb:99:b6:e2:83:02:c0:fb:c1:80:3f:
a0:00:43:3b:c9:03:14:f8:d5:32:12:5d:f2:ae:70:
79:3a:39:d5:d3:0f:15:3e:30:63:99:47:09:41:c2:
d5:d7:4c:72:1e:15:4b:a7:a4:d9:6c:e5:6c:4e:e4:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:DC:93:31:3F:A7:0F:B6:1C:7D:25:EB:EF:4E:E1:B3:28:7C:23
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:63:cc:18:32:61:92:58:78:c6:33:5f:1c:f1:77:30:66:
7d:7a:d3:83:66:c8:b1:52:9c:6b:e4:28:78:ca:62:80:84:32:
2f:07:ee:d6:81:0a:e4:5e:a9:e7:13:46:dc:ab:98:a1:5b:df:
2d:74:d8:97:35:b5:02:c9:aa:07:e0:08:f5:5a:f0:58:55:f2:
be:a2:de:d4:f9:7b:c9:35:ce:c6:35:32:68:62:66:0f:b2:a8:
d8:84:9d:f9:bd:6b:df:b3:ef:05:cc:da:dd:84:07:92:04:6f:
2a:bb:8a:ab:4a:bb:35:aa:4d:97:c3:2a:fd:52:43:3c:1b:66:
21:92:5c:05:8a:70:03:1c:97:f7:0a:c9:a3:d4:20:c2:b1:18:
ba:5b:64:9e:b4:7b:e7:7b:a6:11:2d:84:15:df:6f:b1:de:1c:
8e:67:05:12:37:2f:05:e0:d9:d7:72:53:87:dd:f5:9d:28:75:
b7:cb:a1:45:1d:30:f5:e7:38:b2:d9:5a:b1:90:2e:f9:30:25:
d4:88:35:7e:bc:a0:a5:40:89:8f:00:8e:8e:1f:00:01:e1:f8:
fe:df:45:cb:7a:9f:99:f9:43:df:df:7a:81:89:45:7a:e3:6f:
81:8c:34:c1:e2:23:e9:e4:cc:82:d1:2b:a7:13:3a:6b:f8:6b:
d2:a6:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:23 2025 by rpki-client