Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: aSMnM0tbMB5v2gtcE3WACvzG/rEKsjRn6cmORtNkx3Q=
Subject key identifier: B5:9C:69:89:F5:81:41:B1:C2:EB:98:2D:A1:32:4B:C9:5C:DF:AA:69
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 0198733DDC0A1F4FC0452E5C8DC189EBAE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0B12
Signing time: Mon 04 Aug 2025 04:01:30 +0000
Manifest this update: Mon 04 Aug 2025 04:01:30 +0000
Manifest next update: Tue 05 Aug 2025 04:01:30 +0000
Files and hashes: 1: eElEamJRXa34pPUYDX_wsosnFjg.roa (hash: A2iUP3CvC18fDfjURHdEPTZmoR2njRzEuhMxjf7TGDQ=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: sS3neHUfwei779O/zs1i5XoCAf20WWqtyA+hCZy+UnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:dc:0a:1f:4f:c0:45:2e:5c:8d:c1:89:eb:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Aug 4 04:01:30 2025 GMT
Not After : Aug 5 04:01:30 2025 GMT
Subject: CN=b59c6989f58141b1c2eb982da1324bc95cdfaa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:ec:1e:44:70:43:91:fe:79:2c:74:87:87:
52:8b:14:71:1f:22:60:87:47:ce:89:14:21:68:27:
de:54:b3:e2:9a:f8:91:0f:da:6e:db:f7:f6:d2:25:
b6:2b:f8:5d:58:4a:b9:d6:24:5d:05:98:48:97:97:
aa:0e:f0:44:86:8e:50:7e:9d:41:44:a1:11:6e:39:
4e:a6:cb:97:e6:fa:51:bc:04:2f:d1:9b:55:54:ad:
d6:80:37:76:d6:5f:39:4f:4d:64:b8:bc:a1:83:f0:
fa:85:f1:b1:5b:ca:af:51:41:c3:66:21:ea:85:40:
91:cb:59:ba:ba:a8:53:fc:08:a0:08:85:26:4b:17:
d5:78:f6:a6:75:45:95:e1:ca:bd:1e:19:c1:60:93:
eb:2a:fe:a4:8a:c9:80:f9:6e:e4:1d:45:40:f6:66:
c0:e0:76:98:2e:1f:89:cc:23:26:c1:86:73:2d:ee:
61:23:b3:93:03:e9:c3:66:17:0a:af:c3:ce:17:52:
54:dc:2f:98:cc:d9:f4:27:94:7a:c6:a6:4e:b3:0f:
b5:3a:0d:ab:ab:74:7a:70:15:ac:f7:24:92:4c:0c:
52:ff:64:2c:9f:de:48:2e:fd:8e:e2:77:65:8c:e7:
e2:39:7f:2f:f0:60:84:46:b3:83:44:96:ee:39:16:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:69:89:F5:81:41:B1:C2:EB:98:2D:A1:32:4B:C9:5C:DF:AA:69
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:ca:0d:ac:ce:63:a6:15:41:89:e8:bc:ed:e4:c2:7e:77:
f5:a2:f3:20:69:19:3b:f6:2d:f5:3a:6b:44:cb:ed:74:5f:d8:
92:2a:18:f9:95:ae:06:ea:27:0f:76:60:c2:5f:a0:ba:f3:33:
d0:a3:ad:7c:a2:9a:4b:6b:f5:7a:82:67:24:e4:30:9d:9d:c5:
03:04:e8:c2:8d:e6:b5:99:95:ba:78:fc:34:fd:22:9b:70:ac:
0d:12:4c:c8:5e:b1:f9:0b:15:dc:5d:b9:e8:fe:97:90:b7:6d:
c5:49:0e:03:45:c0:07:5b:37:f7:3d:ef:6d:a5:f5:ab:e2:fa:
a7:43:8f:a0:f7:f6:46:18:74:3b:92:49:a1:c8:bb:a8:96:66:
10:67:cd:82:63:9b:ff:da:e9:e6:0f:9e:be:5e:89:2e:8a:8e:
93:41:b9:25:8d:59:24:68:cd:a7:ec:a4:0d:2c:28:61:40:8b:
70:4e:42:1b:07:4d:59:49:06:b0:ab:fa:d0:16:e3:8f:fc:be:
9d:29:06:ba:5c:fb:1e:78:e0:69:a3:03:65:54:df:60:c9:90:
17:a0:af:71:54:81:9f:83:f1:35:dd:24:e2:2d:f0:0d:f2:3a:
20:ed:91:af:4f:c7:53:2d:81:d7:49:4e:cb:34:18:11:d9:0c:
89:9f:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:11 2025 by rpki-client