Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: VZTf5NEcPOYILf/m2uGuD7Y4ek9ceIjpLyqjIFwkSgI=
Subject key identifier: 49:3A:31:C8:A4:34:C6:73:DD:4C:87:3D:80:E3:82:0D:DE:3A:2B:FE
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01987298FFE3B2A437FF698D955C592D37DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0D73
Signing time: Mon 04 Aug 2025 01:01:26 +0000
Manifest this update: Mon 04 Aug 2025 01:01:26 +0000
Manifest next update: Tue 05 Aug 2025 01:01:26 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: 8t0g0PY0Jt8I0Tkdgxx5SUhAh+0+toQt3DdqwYxeiMw=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ff:e3:b2:a4:37:ff:69:8d:95:5c:59:2d:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Aug 4 01:01:26 2025 GMT
Not After : Aug 5 01:01:26 2025 GMT
Subject: CN=493a31c8a434c673dd4c873d80e3820dde3a2bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:65:98:19:d5:8e:aa:b0:96:ab:07:ac:8a:
97:85:5f:fd:0c:7e:01:75:b3:20:92:5f:67:4b:e7:
b1:a7:95:de:01:81:35:48:c7:93:86:8d:94:7e:64:
00:c0:f3:5d:94:85:53:f9:18:2c:06:3f:2e:54:a0:
2a:ca:7e:e5:25:b1:89:84:b3:86:64:09:46:d1:ba:
4f:44:da:28:95:c3:e2:e7:41:34:3e:e7:f7:6f:e9:
e9:42:8e:b0:dc:07:89:d3:8a:83:e1:7b:fd:32:43:
e6:12:d9:d7:ed:48:3f:a1:9a:ea:bc:2b:07:9d:33:
56:fc:b7:1b:6b:61:bc:09:a3:88:74:65:e4:8f:39:
40:f3:1e:c2:95:49:69:f5:bf:b1:9c:5c:85:a6:04:
6b:fb:5e:4b:4f:93:17:ae:22:b1:c7:ba:4c:b3:41:
01:a8:55:41:a5:98:3b:d0:55:78:5f:27:f5:13:cd:
42:61:04:fb:18:31:85:c7:01:3f:15:05:9e:8c:89:
82:fd:75:8f:c2:b9:8a:ee:74:86:d3:21:e0:60:fd:
79:7e:ae:e6:78:cf:22:f7:0d:0b:70:5c:96:60:6a:
de:52:d1:de:75:98:14:bc:79:a2:ce:3e:5f:20:8d:
96:34:6e:bf:a9:19:ba:1c:b1:2f:5c:75:6a:26:9c:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:31:C8:A4:34:C6:73:DD:4C:87:3D:80:E3:82:0D:DE:3A:2B:FE
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:e2:54:86:4f:70:ec:a0:c1:d0:4e:ab:7e:52:c9:54:69:
7d:2e:9a:a9:bf:aa:ee:f9:38:71:b9:75:40:cb:e5:bf:01:0b:
69:c4:3d:67:7b:9d:9f:5b:94:14:e1:04:93:b4:4a:eb:74:54:
80:3c:d7:3e:3d:87:2b:d3:8f:5e:d3:d9:de:41:2d:52:5c:37:
34:a6:9d:30:03:98:53:0c:3f:88:c5:97:5b:10:d1:29:23:79:
96:37:83:c2:47:49:69:91:bc:40:d9:70:99:61:7f:4f:8d:12:
47:80:55:f2:89:c0:41:42:20:59:f4:0d:d3:68:1e:02:4d:54:
b9:09:68:5d:b6:79:82:84:7b:12:c1:9d:dd:d5:59:ef:1e:94:
a1:92:fe:5a:72:cb:74:b4:f8:df:88:49:a8:f1:8f:3a:0e:4d:
50:98:66:25:1d:93:85:3b:5a:4d:80:78:a8:6b:cf:8f:81:f6:
b4:74:3d:60:e6:0e:e8:85:86:95:3d:07:01:a8:43:8c:26:c2:
64:ea:b9:aa:4d:14:4b:6c:9a:b6:46:20:66:53:7b:b4:ae:de:
92:a2:83:b2:87:24:00:11:ce:60:11:61:c7:ca:5a:21:bd:2e:
f9:85:ca:5b:cd:e5:1a:fc:1f:04:9b:9d:3f:b5:fa:25:c9:51:
f7:e0:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:49 2025 by rpki-client