Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: US3k+lYCBSXrwQRD3tOyYYdivWPweXGGclCyRCCfdrg=
Subject key identifier: A1:B0:96:95:DB:93:E7:DD:2D:80:27:81:C5:FE:A2:50:D2:CA:27:73
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0198C5DAB95F74484947C5BB273C0AA8E62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0EF7
Signing time: Wed 20 Aug 2025 05:01:42 +0000
Manifest this update: Wed 20 Aug 2025 05:01:42 +0000
Manifest next update: Thu 21 Aug 2025 05:01:42 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: 5EkCMvY3NRIo4Cwr7xLO8waBJZ42o3MFzvTRn8jX14U=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:da:b9:5f:74:48:49:47:c5:bb:27:3c:0a:a8:e6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 20 05:01:42 2025 GMT
Not After : Aug 21 05:01:42 2025 GMT
Subject: CN=a1b09695db93e7dd2d802781c5fea250d2ca2773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:7a:f5:8e:3a:9f:9c:91:4b:be:0c:70:e7:
36:4c:b4:94:d8:7a:e0:31:06:a7:c1:86:19:21:81:
8f:18:93:ac:ee:86:b7:32:1f:5c:68:4d:6f:2a:dd:
9a:48:2a:8b:5a:c7:d4:9d:c6:eb:99:e9:1b:36:5a:
6c:c6:e5:5e:f5:ff:45:1f:d6:36:e1:4c:49:48:77:
50:8f:cf:86:36:66:cf:bf:5c:b4:52:5a:a4:08:13:
f7:70:65:ad:77:48:35:ed:7d:08:92:c8:88:2f:a2:
86:53:e5:5d:fd:87:51:ec:62:92:39:b7:ac:74:98:
27:42:e8:f4:48:69:bd:58:22:99:05:7c:98:c1:40:
59:7d:63:65:c0:28:00:3a:7f:f5:2f:79:ea:96:e9:
49:f9:8f:fe:12:cf:8d:b6:11:53:45:2d:98:d8:7f:
ee:d8:b5:b1:05:0f:04:15:8d:6f:ec:7a:0a:17:94:
0c:c0:24:ba:db:76:f8:bf:13:d7:d4:87:11:ec:60:
2a:66:94:5d:f5:66:1c:60:88:44:ff:8c:2e:1d:9e:
c9:ae:a8:e3:b3:2d:f2:7f:df:29:1e:c8:b3:3e:13:
d4:da:f4:15:6f:03:8c:a9:32:ed:4b:07:7e:7a:98:
a2:b4:00:34:51:ea:1e:5d:2e:9f:af:7c:ac:93:70:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:96:95:DB:93:E7:DD:2D:80:27:81:C5:FE:A2:50:D2:CA:27:73
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b3:41:c6:5c:6c:89:e7:5b:aa:0f:6e:20:d4:4f:1e:66:0d:
b5:27:6e:a6:fe:fa:36:96:5f:44:ab:cd:15:2e:61:22:ff:a3:
ac:45:09:30:0b:1a:8e:26:25:e6:6c:87:48:6e:b5:57:a3:1b:
3f:6a:4f:e5:2e:79:3d:c1:56:e5:1e:1a:db:4a:2d:9c:ba:87:
14:b0:65:3d:5d:d5:bc:e5:73:c6:22:9d:86:89:8f:44:50:90:
52:04:3e:f3:d8:c8:b5:53:f0:62:ae:b3:6b:53:d4:48:3f:55:
a5:8e:78:4d:24:cd:03:2f:a1:e8:db:cf:b3:a7:ae:81:68:71:
3a:0f:ea:88:e4:74:b0:ce:e1:bb:ee:8e:44:10:02:eb:cb:d0:
37:e0:d9:e5:e8:32:0d:67:f1:7a:f7:1c:b6:9e:1f:2f:96:8f:
40:fa:e9:94:51:d2:0e:a8:c8:44:66:70:e2:51:88:0d:77:d6:
5a:3e:b7:85:57:61:f3:09:86:30:70:73:06:38:12:e9:fe:d9:
a6:a9:45:a9:0c:ba:84:b9:f6:1e:69:49:99:aa:29:5a:5e:40:
15:dd:a0:9b:7d:f0:e8:fd:e6:0f:1c:9d:69:2f:02:f1:7d:48:
53:a3:a4:a9:1a:fa:de:e8:4f:e3:58:21:89:3b:13:ca:9b:cc:
2a:0e:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:52:31 2025 by rpki-client