Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: +pn9+g/0Bxlr1JJeduA78os0Bt9ijcTNx1k3waxfmWI=
Subject key identifier: F9:E8:61:7F:B5:34:8C:91:7C:33:81:4A:8C:49:17:32:55:96:F2:74
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 01987BD264FBEDF7F720C4DAA415C1F7D5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0F32
Signing time: Tue 05 Aug 2025 20:00:42 +0000
Manifest this update: Tue 05 Aug 2025 20:00:42 +0000
Manifest next update: Wed 06 Aug 2025 20:00:42 +0000
Files and hashes: 1: elVrW7GsJdEG0AHH5dcV885M4Js.roa (hash: UdwSlXQZ/zZ7JOfAaFoyhZ+19ZEq7p03gyl6iG8NxTw=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: mT7CxyojSWTkzTLv3WWE1U5F0QfdcP8B4P4L2LFn59E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:64:fb:ed:f7:f7:20:c4:da:a4:15:c1:f7:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Aug 5 20:00:42 2025 GMT
Not After : Aug 6 20:00:42 2025 GMT
Subject: CN=f9e8617fb5348c917c33814a8c4917325596f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:6a:37:ea:ed:69:a6:d5:76:2a:8f:eb:0c:
f8:75:90:c7:59:b2:e3:11:34:a6:45:54:d9:c1:d0:
0f:63:be:2d:e1:27:a1:1e:8c:aa:bc:d7:07:1b:dd:
44:52:5f:fc:91:c7:78:38:2c:d5:1f:18:76:c4:51:
bc:26:e8:23:f2:c4:d4:02:88:c4:02:3b:68:ca:fc:
e1:14:61:67:4f:3b:62:60:71:82:18:fb:39:66:0d:
8b:71:65:54:f8:0a:b5:09:ea:5b:38:c8:e5:aa:e2:
08:b9:9f:cb:d2:b5:18:99:52:cb:52:28:05:60:dc:
16:ab:38:01:13:eb:63:82:b4:6f:65:76:34:f6:d4:
6e:b2:3a:4d:e6:91:86:b4:0b:67:cb:dd:4d:aa:43:
e5:0d:1a:6b:68:47:61:f2:7f:59:7f:3f:f1:02:00:
57:92:4f:25:7b:aa:0c:b7:22:0f:65:6d:20:b0:55:
48:1f:96:23:b2:42:a9:ff:fe:11:88:fb:13:74:46:
f8:44:31:ba:ad:5f:16:3d:c9:c3:d4:9b:27:8b:f0:
39:4b:90:7f:9d:b1:ff:3e:2f:41:0f:c4:97:c5:25:
29:61:d4:aa:fa:42:ea:80:b9:bc:b2:14:b0:81:8b:
aa:3a:d2:d2:9d:0e:97:43:61:84:f3:d9:1d:c3:b6:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E8:61:7F:B5:34:8C:91:7C:33:81:4A:8C:49:17:32:55:96:F2:74
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:20:36:99:29:26:45:63:cf:3d:9c:b9:04:bb:83:75:1a:7b:
5c:f1:6e:1f:22:8c:0c:3d:2b:90:85:d9:a7:7e:f2:d7:95:fe:
e4:d1:66:54:40:c2:f5:9f:17:f0:f7:f5:3c:f5:c7:41:34:e1:
02:c5:74:05:89:c7:c8:d7:b4:e7:94:17:69:14:cb:0a:0d:31:
3e:16:74:c2:9a:12:bb:70:88:78:b7:14:e6:d7:43:fa:5f:cd:
0c:97:25:0f:55:aa:8c:ea:da:0a:bd:37:4a:ec:61:6a:70:65:
c8:8f:6d:7c:c8:26:ff:ab:73:ae:33:eb:17:12:56:78:f4:38:
1b:6d:4f:11:0c:39:2a:a4:55:87:b9:60:60:a4:e0:18:63:0e:
44:a7:cf:c3:34:0d:59:c4:42:3e:54:61:72:07:57:6d:86:d8:
e6:6f:05:46:e3:e1:68:22:4e:b7:56:4d:28:f0:fd:d5:ae:1b:
d4:7c:31:f2:f5:05:1c:0c:12:74:23:4e:90:67:eb:e6:e0:7b:
13:a6:3b:d8:77:3c:b2:21:fa:d9:98:b6:e6:56:ae:53:77:8e:
ad:21:ea:51:c3:50:af:e7:e3:be:be:ae:db:5f:67:9a:56:a3:
a5:b4:2a:81:32:5e:9d:70:99:23:f0:6d:9d:c5:9d:c1:04:bd:
d5:df:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:00 2025 by rpki-client