Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: peV6qVEkKMHOX/TQbg4lhNWSrZkoAh98XMWNHM/YtSU=
Subject key identifier: 81:5C:8B:6D:00:CC:2A:DD:10:C4:53:0E:F9:DB:B4:F5:A6:2B:7C:7F
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0199345C384F721682835CECBA057A5D8C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 16:01:22 +0000
Manifest this update: Wed 10 Sep 2025 16:01:22 +0000
Manifest next update: Thu 11 Sep 2025 16:01:22 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: u8cBoyuvCXhXf7m+jDin5csmbyeI4bjU7ioMJw0Ynzo=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:38:4f:72:16:82:83:5c:ec:ba:05:7a:5d:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Sep 10 16:01:22 2025 GMT
Not After : Sep 11 16:01:22 2025 GMT
Subject: CN=815c8b6d00cc2add10c4530ef9dbb4f5a62b7c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:8d:19:6f:68:65:e2:54:f2:ec:bf:1a:b4:
d5:42:c2:83:ed:46:f8:1b:77:d4:f2:9a:de:55:3b:
34:0a:9d:1f:cf:59:34:ce:a1:04:e7:fa:4c:be:ca:
55:ec:46:2c:d6:cf:34:c6:54:3b:49:4c:f8:12:06:
44:d4:0f:a3:5d:6f:11:76:bf:db:99:e5:52:df:1c:
b6:ed:2e:15:8c:c1:9e:d6:91:18:d2:54:bb:4d:7e:
bd:95:64:fa:55:f6:c1:7a:fa:a5:dd:0a:c3:c3:f8:
12:c7:87:98:6b:80:d9:f8:5a:dd:89:6b:8f:0e:a3:
a4:3e:7d:80:13:70:84:31:b9:1c:d0:ed:85:d0:52:
15:3e:f8:9c:0c:24:64:e2:af:7f:79:54:6b:2e:bd:
81:c3:b6:8f:60:84:12:d7:10:11:7e:9d:0b:21:7c:
ab:1d:05:7e:e9:ac:9e:0f:47:5a:84:ec:f3:46:65:
c6:36:10:df:c6:67:2a:84:10:61:af:2f:69:27:ee:
26:6e:41:0c:18:19:18:c7:4a:7a:ec:f6:48:b5:88:
79:85:fb:0e:c5:41:35:4d:2d:70:1f:af:0a:ba:e5:
51:3d:88:cc:25:81:08:7e:32:7c:bc:2e:74:64:5d:
c3:a1:a6:7f:59:3f:00:f4:75:8e:75:df:49:76:f6:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:8B:6D:00:CC:2A:DD:10:C4:53:0E:F9:DB:B4:F5:A6:2B:7C:7F
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:34:95:5b:13:88:0d:c5:9a:2e:b8:1d:e1:9a:11:9d:cf:6e:
67:bb:9e:e9:60:9f:02:5e:31:b8:c8:62:1c:de:a1:61:83:b6:
74:4c:7c:b3:b4:95:b0:4f:f9:53:a0:77:df:9f:42:f4:5e:16:
00:eb:56:30:de:89:86:53:ae:17:50:c0:da:34:dd:e2:b3:79:
7f:b5:f3:5d:e6:30:f1:17:0c:85:ab:43:65:af:5f:0e:5c:d9:
6c:25:e7:be:da:a1:74:1c:be:db:c5:37:d2:fb:a9:b7:2d:c4:
05:d5:7e:43:03:f9:b8:f0:c5:33:d2:92:cf:3c:c3:d8:cb:77:
f0:3c:b2:4b:33:df:d8:e2:fd:6c:14:17:b5:ec:13:0c:99:4c:
8e:2e:51:ef:0e:0a:86:71:43:70:3e:b6:7c:7f:1c:6b:49:ae:
6d:6c:00:32:ba:eb:bd:a8:b5:16:f8:f3:09:30:fa:36:2d:77:
0d:71:fb:94:97:cd:75:dc:87:b0:27:27:8f:6f:ca:a2:3f:42:
0b:78:5e:45:33:cc:f5:7d:61:36:94:89:79:27:72:6a:a5:86:
f7:f8:d3:15:08:42:97:34:55:ff:01:de:45:a1:2b:56:5e:8c:
a7:2e:e4:92:03:d8:e4:a1:12:98:94:2b:38:38:c4:32:6d:64:
84:00:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:52:27 2025 by rpki-client