Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: o4CMNmJJeKIz5T+v1y7SfhKXn0dpnGfj9fAGy+Hr8nc=
Subject key identifier: 91:7F:8C:36:B4:F8:77:4C:02:E9:FB:C4:AB:EB:98:82:9E:1E:90:6B
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019873E3EDB288548F1F7126C7959AC844F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 132F
Signing time: Mon 04 Aug 2025 07:02:53 +0000
Manifest this update: Mon 04 Aug 2025 07:02:53 +0000
Manifest next update: Tue 05 Aug 2025 07:02:53 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 4cGKNgt3HQs+pt0PRakHxI5q86h3FfQm+6Lsvb3R1XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ed:b2:88:54:8f:1f:71:26:c7:95:9a:c8:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Aug 4 07:02:53 2025 GMT
Not After : Aug 5 07:02:53 2025 GMT
Subject: CN=917f8c36b4f8774c02e9fbc4abeb98829e1e906b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:67:29:74:dd:c6:24:c9:eb:3b:80:d7:b5:
dc:2b:10:fa:6b:84:fb:30:6b:65:e2:bc:31:7b:8c:
1c:34:75:af:e2:9e:2f:c2:4a:68:39:e1:d0:b2:6b:
ee:ba:7b:c3:a4:32:37:2b:fa:23:0e:7b:66:42:70:
a2:b1:c7:f1:42:c1:22:b4:ef:62:f5:81:d3:b9:74:
21:3c:1b:48:c8:0a:a7:d9:05:25:eb:da:3d:b8:7a:
04:cb:22:77:19:74:32:b3:49:96:13:6a:49:37:26:
93:fe:e0:66:1f:9d:a9:bd:c1:1d:17:a8:12:ee:15:
37:7c:b9:30:92:10:40:9d:9c:f2:77:e2:52:fb:da:
68:9c:8d:31:e8:2f:c8:3d:63:a8:0f:7a:4e:49:50:
30:0c:66:22:48:dd:e8:87:15:96:29:55:57:aa:dd:
ca:42:98:48:09:a1:9f:4c:bb:ea:28:3a:fd:2f:11:
11:46:d8:97:1b:73:25:3b:3c:69:92:13:0c:3c:cc:
de:d7:51:2b:8b:f6:84:5c:ef:9a:2e:87:bf:f3:d7:
b8:5f:81:f8:50:f2:7e:d0:f3:98:be:94:59:63:5b:
91:33:98:ab:d0:e4:b8:b9:61:9a:79:34:2f:be:6c:
b3:86:49:39:43:f8:9d:b5:0f:b8:e9:15:b5:c4:d1:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:8C:36:B4:F8:77:4C:02:E9:FB:C4:AB:EB:98:82:9E:1E:90:6B
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:e0:0d:ef:e2:b7:86:0a:4a:4e:f2:eb:d7:a6:a7:c9:a3:
72:5a:f7:9a:cd:82:39:9b:fb:3a:19:34:fa:53:83:38:c6:38:
66:30:0a:ac:15:7d:8a:03:d2:93:e6:38:64:d3:d8:30:32:16:
bf:17:38:e5:1f:16:e9:38:a3:01:95:37:b8:16:17:f9:90:7c:
74:93:b2:18:0d:80:50:38:ba:4a:d7:02:97:3a:9a:17:51:ac:
0d:16:35:3d:22:fe:e5:e8:49:d0:47:d8:9f:c5:71:cc:43:45:
6c:c9:3a:1c:98:d3:48:8f:b4:06:e3:c5:33:8b:f9:30:fc:1b:
3d:2e:99:49:f4:37:a9:d9:1c:a1:89:e7:9d:34:81:66:b0:89:
54:5b:76:88:3b:23:ae:93:1d:c0:71:14:5b:f6:00:d4:05:72:
f5:62:c4:97:6e:17:ec:b6:bf:83:30:d0:48:f7:82:73:cf:3e:
e0:32:7f:1d:d0:05:0d:8c:3a:59:54:aa:39:0f:87:90:08:f9:
5c:3b:e5:76:89:0e:75:af:48:f0:fb:0f:6d:dd:e3:f4:2c:0d:
3d:22:a0:29:6f:91:17:fc:d9:4f:ff:55:2e:45:f7:70:a9:8c:
d2:88:5a:9c:08:67:a4:33:37:ff:2f:6e:8d:bd:76:80:76:f3:
fe:55:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:33 2025 by rpki-client