Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: gjSMUO1VFDvt8FTT7EEjjZb0NDawnHi2JcXOQH9s3D0=
Subject key identifier: CA:E0:91:70:2A:D8:A7:78:9B:1B:65:11:72:3E:33:77:21:8A:61:FB
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 0199375D1414FA7E05E93BDF3868FE0BF36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0B5E
Signing time: Thu 11 Sep 2025 06:01:10 +0000
Manifest this update: Thu 11 Sep 2025 06:01:10 +0000
Manifest next update: Fri 12 Sep 2025 06:01:10 +0000
Files and hashes: 1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=)
2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: 7sc2OA9+RVB745q6edrmO2OGX66Luz0jzELmQ1moUmA=)
3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=)
4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:14:14:fa:7e:05:e9:3b:df:38:68:fe:0b:f3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Sep 11 06:01:10 2025 GMT
Not After : Sep 12 06:01:10 2025 GMT
Subject: CN=cae091702ad8a7789b1b6511723e3377218a61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:e1:08:cb:df:58:23:c8:4a:55:1d:4f:45:
21:09:65:e7:1f:75:bc:a7:16:1b:fb:a6:fa:98:b5:
32:6e:68:93:29:26:5e:74:f1:0d:93:68:b8:86:20:
ed:a3:f7:5c:ab:d8:76:ab:e6:7b:12:a8:69:0c:9e:
5a:cf:98:6b:7d:5b:e7:cd:c7:8d:6d:66:3e:3f:60:
20:83:25:c5:11:a3:8a:42:94:ed:ac:94:4a:6b:5b:
36:55:4f:f8:e9:df:86:98:f8:ec:d6:e2:51:88:f7:
23:a5:ec:72:52:2c:3d:75:aa:49:cb:7b:55:a8:9c:
f6:fc:5d:ca:c9:cb:ce:8e:0b:87:8f:7d:55:1e:e5:
b2:50:53:d5:ba:11:dc:ed:eb:71:fd:f1:ba:b5:db:
62:07:8d:c7:28:ba:db:c4:fa:e3:7c:b2:4a:d1:8e:
92:49:ea:99:f9:ae:42:e6:0f:b4:59:2a:f4:38:35:
e1:64:b9:02:fd:36:6b:74:72:d4:55:5b:bc:1c:df:
de:0d:2f:ff:0b:69:f3:0b:1f:1d:76:e1:e7:8a:1d:
37:73:e3:fd:34:b3:7b:d0:11:04:1e:88:56:59:15:
24:f4:c3:0c:57:61:68:78:cb:2c:81:ce:f3:b3:47:
e0:bf:40:3f:ec:91:ed:dd:76:b3:ec:b4:c2:c4:4a:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:91:70:2A:D8:A7:78:9B:1B:65:11:72:3E:33:77:21:8A:61:FB
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1a:59:26:dc:a8:d5:8f:60:eb:60:bd:53:49:51:52:47:73:
92:50:46:86:6f:07:52:cd:2c:86:74:ed:a8:0f:3a:e8:b7:de:
f6:23:93:9c:c3:15:e6:dd:f8:bf:5b:2e:71:2e:e9:b8:85:ce:
27:d9:77:76:5f:b2:5f:8e:86:21:00:2e:0b:ba:10:ac:16:66:
52:01:cd:a2:66:f5:17:fc:cb:c9:d8:95:9d:e6:fd:cc:91:a4:
a6:fc:4c:0f:d0:1d:28:f5:88:0b:e3:da:67:c4:a1:72:e5:05:
8f:76:32:af:f2:c3:c8:29:d8:05:87:45:7a:d1:03:6f:e6:27:
8c:a4:51:df:c3:6c:25:1a:55:10:97:df:78:a9:7b:df:cb:1c:
7e:be:5a:00:16:ac:db:30:31:57:2e:a0:87:8b:12:ab:4d:71:
c9:1f:f1:ba:72:b5:b7:b9:64:26:7c:63:4e:df:6e:7a:c3:e4:
db:c9:71:0c:04:62:dc:cb:84:fa:d0:fa:62:7c:68:43:7b:8d:
15:db:1f:86:eb:61:47:89:4c:0b:cc:a9:fc:19:d4:40:23:da:
93:df:c5:19:c9:dc:6a:c4:f7:54:a8:e3:fb:3b:e0:d0:de:c8:
59:99:bf:ad:d2:e1:aa:9f:f6:30:e0:2b:e1:fa:96:6f:46:b0:
05:8d:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:36:04 2025 by rpki-client