Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: l9TEVySQWYgc+TGT4AW7096YF2YKt+14oF0kWdSZ3CE=
Subject key identifier: 34:7B:88:A6:68:5F:52:99:8D:4F:65:9B:99:4E:7C:B0:AD:B5:94:F2
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 0199225569FA01CB61407D330387AF1DA04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: MKs71nHKBuBFUzEKqvagFFCPJPnXaU+40paC4KqQWVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:69:fa:01:cb:61:40:7d:33:03:87:af:1d:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=347b88a6685f52998d4f659b994e7cb0adb594f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:ca:96:3d:2e:df:3d:b6:0a:05:9e:a3:60:
12:c1:e9:01:7b:15:6e:52:98:92:b8:d0:26:4f:62:
c7:e3:82:7d:41:ee:34:41:11:51:3d:16:d7:ae:07:
de:b3:d2:f6:73:e1:02:79:50:7a:43:f7:6a:75:a0:
b2:b1:b3:33:b7:a6:ef:26:f0:04:c7:f4:2e:39:62:
61:10:c9:7e:a1:3d:67:a3:6b:6c:11:6c:4d:2d:4b:
d8:88:a0:19:a4:a2:d6:4f:23:70:0f:1e:e2:9b:6c:
79:46:35:12:a7:2b:34:cc:af:df:2a:51:7b:c1:fb:
eb:9e:1d:ba:f1:41:9e:f1:74:64:2f:31:7e:98:33:
d1:e3:6c:42:db:4b:45:df:57:ff:c6:fc:7f:cd:b5:
c1:23:dd:37:0e:48:0b:14:bd:4f:2f:98:55:4e:dd:
25:60:c3:8a:f1:ff:ff:12:e4:24:53:a1:d5:2e:cd:
5b:df:65:26:46:e7:92:4f:ef:33:e2:aa:fd:23:8e:
a1:5d:5a:e1:6e:09:da:b1:f9:be:55:51:b3:ff:65:
7e:97:1f:38:00:21:b4:27:88:1b:87:00:31:62:7c:
1c:3b:97:e5:65:fd:ac:77:8e:28:94:0c:bf:92:56:
a2:36:f4:d2:7e:30:cd:48:79:28:c5:99:97:55:7a:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:88:A6:68:5F:52:99:8D:4F:65:9B:99:4E:7C:B0:AD:B5:94:F2
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:aa:50:d5:c7:3f:0b:dc:02:8a:5f:99:2f:42:e3:a9:45:6c:
6b:84:29:c4:00:9a:11:d5:e4:13:79:34:09:0a:75:d5:e8:d8:
d3:88:b0:18:cc:24:a4:e0:51:22:23:46:f3:ad:5f:55:13:3b:
f0:e3:fb:f7:f4:65:27:36:32:fc:22:77:d2:2f:a3:a7:29:4a:
e1:96:36:9e:93:c9:30:c3:a0:f8:4e:c6:1c:a1:96:9d:6a:79:
64:8e:39:22:e0:8c:0f:78:68:95:12:7f:c5:20:88:dd:73:ef:
fc:ff:0f:53:02:ad:63:ee:52:9f:e1:43:e7:8b:71:5a:74:1f:
9d:b1:16:b2:fe:d4:ab:1a:05:4d:6a:86:e6:97:0c:80:b9:69:
5a:9f:59:29:71:81:49:07:86:b4:6c:3a:68:8a:7b:ad:8c:76:
b8:48:c0:25:96:fc:27:3b:8c:6b:b0:e0:36:65:ba:5b:e5:0d:
65:b3:2d:18:09:27:b7:07:28:34:a6:98:b1:f8:34:fa:c4:3b:
05:fc:0e:83:9b:6f:7f:8b:b3:6b:d3:8e:b8:6c:c6:7d:52:4d:
26:62:7e:5c:63:1f:66:f9:a3:67:bf:52:f2:ba:07:37:52:cf:
66:03:42:1b:d9:5d:76:bb:2e:15:d6:e9:a3:47:92:29:17:ee:
be:30:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:31 2025 by rpki-client