Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: QpD3X10yTIFsGB2jttdetRgQyY8iiiecEp835gJOttI=
Subject key identifier: 8D:8F:4A:29:58:DC:02:12:4F:53:97:AF:10:0D:1E:94:70:E8:3C:E0
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0198744FB87BAD0E1856E892401E2A9E24AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 045E
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: myRo+aC4JeEZSbuJP6k36d/T/JQULqPJOFkd9lLlAZc=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b8:7b:ad:0e:18:56:e8:92:40:1e:2a:9e:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=8d8f4a2958dc02124f5397af100d1e9470e83ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:e1:6d:31:f9:3b:d5:f2:6c:66:c9:d5:4f:
a7:44:b7:b9:0e:33:4b:01:9a:0f:ca:4d:7f:cb:7d:
4c:25:e4:0d:77:ff:00:97:b1:ca:c5:2d:b9:c2:56:
b1:a8:69:34:3c:e5:d8:93:73:5c:aa:1f:ef:84:7d:
90:7a:95:6e:9d:14:4f:0a:85:ca:2a:b8:c9:95:ca:
12:6c:76:8f:5e:61:e8:f2:a6:cc:3d:83:92:26:23:
08:6d:04:01:73:4e:c0:9f:18:78:33:9a:b0:09:dc:
b7:50:cd:7d:64:c2:49:b6:f9:c4:25:3d:d0:d4:94:
12:e8:2c:ed:9f:20:80:3c:dd:66:86:a6:a2:87:d3:
10:17:28:e4:d4:3d:7f:68:71:c1:22:03:44:8e:53:
c1:8d:1e:07:ed:6a:f8:10:fd:d6:30:8a:65:1c:be:
3e:e1:a0:e9:40:f4:4c:70:13:56:05:d5:3e:05:c1:
48:55:80:49:55:5c:d7:dd:47:2b:9d:c7:15:4e:b4:
a0:2c:50:bd:56:3d:e2:56:76:4a:1b:6c:cb:63:95:
bf:21:98:6e:5e:31:ef:fc:7d:ae:f6:4d:7d:c3:c6:
ed:48:96:25:b7:c5:53:89:db:9e:db:47:2e:6d:ad:
ff:54:80:73:f2:fc:e2:78:35:64:ff:a0:89:95:58:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8F:4A:29:58:DC:02:12:4F:53:97:AF:10:0D:1E:94:70:E8:3C:E0
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ba:0d:04:80:c2:e8:d4:8b:2b:fa:33:5c:f1:48:e2:1b:fe:
ce:f9:ce:d4:90:80:8a:2e:04:54:7c:a1:9a:67:37:1e:44:9e:
bb:3f:ef:9a:07:55:6e:4f:6b:15:bd:2d:0e:19:45:20:48:af:
dd:af:ff:9e:66:bd:ea:68:ed:f0:7a:4e:f9:19:3c:98:8c:c0:
27:12:0a:0b:bb:88:34:b0:35:bd:b3:8b:d4:71:22:0c:fb:44:
1c:0a:df:c1:e4:90:12:d0:0d:b8:4d:5e:5f:30:4e:c0:02:17:
83:f3:d9:c8:55:a5:37:f3:00:0d:58:3c:2a:b1:43:c3:95:6a:
9d:0f:75:df:08:84:2d:79:aa:7d:03:2e:69:68:6c:36:93:a6:
8a:2f:f3:21:12:25:a8:40:e6:8d:94:39:9a:96:68:d5:41:f6:
7e:29:f5:d6:c2:c7:24:5f:59:aa:16:f7:97:a4:cc:52:15:d0:
a5:50:e6:ef:a6:5e:08:53:67:66:4f:ef:60:54:4c:0c:e4:31:
be:b0:43:93:a8:a6:a5:02:90:9f:18:ae:f1:ac:c7:ff:b1:d0:
1e:1e:57:cd:74:11:27:ca:74:af:ed:83:e3:cd:38:91:f1:3d:
d4:f5:97:be:a0:41:bc:96:37:a3:b1:e0:fc:01:b5:44:5c:f1:
13:f3:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:28 2025 by rpki-client