Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: KszjG79wOyobsAYxhuGOCHcl++9H+tx1K8CRg3cSL6o=
Subject key identifier: BE:6D:DA:95:26:CD:8D:02:38:05:19:7F:D2:DA:73:75:93:73:EE:7D
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 0198861F900461433926E59F92E11727806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0CD4
Signing time: Thu 07 Aug 2025 20:01:12 +0000
Manifest this update: Thu 07 Aug 2025 20:01:12 +0000
Manifest next update: Fri 08 Aug 2025 20:01:12 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: scM9f40Cu9vlSKSNyZpC/nQ8uy+czr7kUr6mFyRm57Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:90:04:61:43:39:26:e5:9f:92:e1:17:27:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Aug 7 20:01:12 2025 GMT
Not After : Aug 8 20:01:12 2025 GMT
Subject: CN=be6dda9526cd8d023805197fd2da73759373ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:24:17:e8:86:69:f7:49:76:1c:89:ee:76:
45:93:76:29:6b:00:1d:3d:2b:52:01:09:b3:98:82:
a7:4c:0b:ed:3f:ab:ec:74:08:2b:b2:df:86:08:3e:
ee:43:a2:82:4c:d7:ea:29:5d:26:11:84:0a:32:df:
95:68:05:9b:ed:1a:02:7e:23:43:77:52:be:a2:67:
59:05:3d:37:c0:ab:33:e7:69:ed:fa:61:89:dc:06:
86:cd:05:24:50:5e:e5:ab:42:8c:df:6b:93:f7:b2:
33:d8:f2:a3:a6:0a:16:86:4b:57:4b:c5:d9:99:7c:
d4:12:18:bd:b6:23:08:47:87:b9:b1:d9:af:2a:ff:
bf:b7:7b:72:43:fa:64:88:37:f5:5f:a3:17:46:fc:
03:f1:e1:18:f9:7d:da:4a:1f:31:3e:93:4a:09:37:
fa:37:3d:c2:df:b6:fd:03:93:83:8f:48:6e:84:cb:
84:7f:6f:6e:99:e6:14:42:fb:82:e7:f7:2b:99:ba:
2d:ce:3a:7e:db:f5:90:73:4d:99:9b:ee:00:71:9a:
83:50:4c:ee:85:fa:5d:c4:89:82:10:f8:9f:71:bc:
7c:5a:65:7f:ae:98:76:0b:aa:e5:f4:f3:4b:ab:6d:
57:b8:6f:71:c4:47:aa:9f:b9:be:b8:1a:5a:8d:8b:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:DA:95:26:CD:8D:02:38:05:19:7F:D2:DA:73:75:93:73:EE:7D
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f1:9a:15:76:0c:d9:73:53:b5:69:1d:61:2b:4a:8e:50:65:
16:06:0c:30:d5:3b:4b:60:56:df:34:de:61:c4:90:4d:ef:cb:
13:7a:59:25:4a:ca:c6:29:aa:80:36:c8:11:98:8f:ca:4d:57:
d9:f9:69:5b:38:c5:da:3d:36:c1:55:e9:1a:32:31:ee:25:1a:
74:d3:09:81:ef:96:50:0d:cf:bf:33:78:2d:bd:43:96:15:6e:
62:14:f5:cc:70:bd:be:be:bb:64:86:55:13:15:5c:72:5e:f1:
c1:02:53:77:eb:55:b6:3d:a6:4d:1a:10:53:16:de:ae:df:83:
b4:59:af:94:86:4d:d7:17:c5:cc:eb:3e:b3:70:f9:d7:3a:ac:
b5:ae:29:0b:a4:c2:19:73:3e:6d:a6:02:bb:40:a1:26:94:f3:
d3:a0:fb:da:38:59:bb:c6:1c:56:56:eb:21:52:4e:73:54:8d:
27:34:f0:4b:5d:13:65:66:98:21:ad:58:02:9b:56:87:3f:b0:
4b:42:15:3d:fe:d2:a1:1d:16:09:3b:a4:05:7d:f2:d8:ba:c0:
b1:44:9e:9c:38:99:9b:1c:65:fb:5b:e6:8a:e3:0c:af:ad:94:
a3:6b:81:3a:da:e3:76:a4:4f:1f:e9:21:95:54:9b:fa:eb:7e:
b2:ca:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:40:07 2025 by rpki-client