Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: Rcd7Up9pDVkEycw+qEvIOalLtI/E9lg2CNsLhWtyTyE=
Subject key identifier: 5E:D5:C3:A5:1A:71:11:F5:F8:77:28:C3:21:13:AC:DB:F3:36:BB:8F
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01987E65AC9898B98878BD08E5C8A9062380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 07CA
Signing time: Wed 06 Aug 2025 08:00:49 +0000
Manifest this update: Wed 06 Aug 2025 08:00:49 +0000
Manifest next update: Thu 07 Aug 2025 08:00:49 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: r1xHq4Jr754Yzl2/ocsmHSwslLCe2Uk7kcjlKYseb5s=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:ac:98:98:b9:88:78:bd:08:e5:c8:a9:06:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Aug 6 08:00:49 2025 GMT
Not After : Aug 7 08:00:49 2025 GMT
Subject: CN=5ed5c3a51a7111f5f87728c32113acdbf336bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:7a:08:48:d1:d0:66:33:20:2d:22:e4:f2:
26:84:53:91:88:ec:2d:b3:62:35:38:3a:4b:ff:8d:
55:8c:b4:23:46:0b:d3:b7:c8:a0:d3:2a:cd:81:0c:
49:a1:49:e8:83:24:5e:35:ca:5c:6e:84:85:4e:18:
71:0c:9b:91:e0:5e:41:08:1a:8e:61:7c:a5:66:aa:
d9:b8:82:a4:84:e4:43:b5:4a:90:e4:bc:72:e3:8d:
da:d9:0e:ca:04:8b:03:35:e0:a1:16:fc:78:68:05:
c9:eb:6b:78:c8:c3:c8:bd:f4:ca:34:47:05:2c:d4:
e1:21:3c:7f:6b:ea:72:9c:29:37:a2:2d:69:a8:18:
dd:7b:63:0b:a8:44:58:54:51:fb:9f:c5:7a:ec:76:
03:ec:cf:1f:14:9a:f8:3c:57:73:9a:4a:53:cc:c9:
88:7f:fa:18:50:7d:33:9e:bf:c5:f3:c2:67:9b:df:
51:df:02:db:6f:53:34:2f:62:4a:59:87:5d:93:70:
53:01:49:66:14:e9:1c:a0:db:96:fe:2d:c9:c4:ab:
e7:17:12:f4:e1:65:66:ac:1b:cf:bb:67:66:c4:31:
cb:74:0b:95:be:4d:96:e7:17:04:b7:d7:f3:74:0a:
2b:5b:67:b6:71:b9:d3:91:e0:07:f1:34:c5:27:fe:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:C3:A5:1A:71:11:F5:F8:77:28:C3:21:13:AC:DB:F3:36:BB:8F
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:0d:e0:c0:08:db:af:6c:ec:4a:18:f4:15:8c:87:29:16:
cd:42:e4:8f:11:c7:da:4b:b3:af:69:3b:38:77:95:d7:68:3f:
55:bb:8d:49:39:95:4d:ae:07:82:04:c6:a4:46:02:96:a7:cf:
5f:1b:ef:08:18:5e:7a:39:06:d1:56:57:b7:65:05:8e:89:b5:
76:f3:82:48:7d:30:af:0d:e7:db:36:83:e5:78:d9:ab:10:b9:
9c:80:00:cf:9e:0d:c1:fe:1a:b2:85:2e:27:f9:a7:e5:19:f8:
25:00:8e:fc:f4:23:7d:a5:69:ea:8a:49:aa:8c:30:16:76:2f:
a6:5a:83:7b:68:1c:05:68:a8:8f:1c:d5:f4:43:7e:5c:88:35:
80:0c:7c:19:54:b7:cc:a2:e2:81:f4:71:c4:3c:9f:5d:24:2c:
c4:cc:b9:0c:25:ee:ae:98:af:d9:58:62:f0:62:32:22:e8:65:
19:ba:f8:c7:a9:56:e4:50:df:7d:d2:4c:be:5b:d8:a1:c3:a7:
f1:c2:d7:2c:d6:56:b3:ec:77:44:5f:33:54:d3:e8:40:30:f9:
1d:1b:c2:15:ef:2c:32:24:33:61:69:53:d0:c5:f8:3a:e0:95:
cd:79:c1:14:f8:7d:89:13:61:d8:99:19:da:e1:b9:54:52:57:
04:96:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:49 2025 by rpki-client