Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier: UctnjGg3DGcEuczWzUCI9/ZcSrBw3sQcIzBhLKvO/Ws=
Subject key identifier: 49:F7:52:32:CD:F9:03:AE:9D:64:95:56:C1:00:0E:AB:24:36:AA:E8
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019923A05091F08CC34934F50DADD93D6EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number: 0DBB
Signing time: Sun 07 Sep 2025 10:02:12 +0000
Manifest this update: Sun 07 Sep 2025 10:02:12 +0000
Manifest next update: Mon 08 Sep 2025 10:02:12 +0000
Files and hashes: 1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: jfSmvK9VA4bPc3DcfMF2BeezYv7uD+Yyatn6VsAqSpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:50:91:f0:8c:c3:49:34:f5:0d:ad:d9:3d:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Sep 7 10:02:12 2025 GMT
Not After : Sep 8 10:02:12 2025 GMT
Subject: CN=49f75232cdf903ae9d649556c1000eab2436aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:44:fc:f1:15:d0:64:6a:92:6c:e8:a8:85:
1d:94:88:e9:3e:29:c9:82:83:a5:be:28:6f:de:70:
9e:7c:95:96:2a:67:f8:cb:37:db:53:2f:a2:19:f9:
e4:50:75:27:98:65:d4:4f:f4:f9:a9:45:c0:cc:1d:
90:02:8f:ae:52:33:8b:fe:e5:fc:9a:58:84:4a:61:
6d:74:08:31:92:f0:cb:1a:90:ad:11:0f:be:8c:ec:
2c:ee:11:3d:fb:5a:0c:82:95:41:02:f0:4b:74:96:
88:78:8f:c3:34:6e:14:8f:99:ad:83:ea:5a:c6:49:
82:af:d5:d2:59:d4:a3:a8:96:5d:00:c5:62:72:4e:
c4:6b:d0:4f:4d:f1:7f:c8:e3:59:68:58:f1:0a:31:
1c:41:1f:22:52:5e:ea:bc:78:b3:72:5d:f9:1b:a1:
6a:36:4e:d3:9c:9d:21:f6:69:01:23:3b:90:31:10:
fb:2b:97:0a:5d:7c:f5:05:52:4d:72:5f:25:0b:7d:
42:fc:23:62:02:c2:2f:7f:02:3c:e3:26:32:1f:ef:
1d:7a:e9:78:4f:f4:86:2e:be:63:27:3b:07:79:74:
b8:a3:0a:9a:10:6d:7d:d6:8e:dc:28:13:47:b2:c4:
e3:a3:b1:b6:f9:97:2c:a6:56:03:ad:af:a9:c8:5a:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:52:32:CD:F9:03:AE:9D:64:95:56:C1:00:0E:AB:24:36:AA:E8
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:df:35:04:f1:b7:14:14:0c:6b:ac:be:be:43:dd:12:d1:
da:b3:fd:30:26:a4:34:f6:d5:1f:75:18:71:28:8e:57:db:ed:
31:87:72:56:95:97:0a:28:7c:1b:fa:cc:b0:3f:11:3c:c0:98:
fc:2d:8c:1c:47:8d:c1:bb:84:a4:24:17:2d:8b:36:5a:2d:ad:
a3:b1:b8:f0:66:66:38:02:59:16:9b:29:17:4d:53:eb:18:33:
d2:a0:6e:76:a2:48:fc:c3:bb:c0:67:20:e4:79:4f:8c:35:bb:
a0:12:60:4d:d9:d9:a6:2c:b8:cd:9c:00:3d:62:3f:ea:c0:17:
e6:ab:6f:68:ea:8e:aa:ce:46:d3:c6:8a:e5:fe:ea:c2:50:e3:
50:3a:20:7f:e8:f8:46:34:73:90:e9:27:ac:56:be:26:06:6c:
d8:4b:72:29:8f:33:ff:e4:5d:4a:2d:52:0c:66:d0:02:e6:bb:
fe:88:87:ef:f0:db:e9:9f:c4:f8:19:e6:3d:94:5d:04:a0:be:
86:f5:20:54:ba:f0:21:fe:22:3c:e7:05:0d:5e:57:eb:e3:6a:
1b:94:7a:07:79:b4:dc:df:36:39:7d:f4:a3:9e:54:ee:89:3f:
bb:4b:25:2b:62:69:37:31:28:b9:07:c0:06:0f:3e:ab:85:9f:
54:e2:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:41 2025 by rpki-client