Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: Vdu8nXnum9We7VqrVX+G1c1lLGG9kuKOduz7xxEz3Ig=
Subject key identifier: 29:68:4F:F5:D8:22:95:4A:40:8D:BA:6F:19:8A:3A:E2:8D:3A:72:8F
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019873E221E0D981DB5BC582752A020C488A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1427
Signing time: Mon 04 Aug 2025 07:00:56 +0000
Manifest this update: Mon 04 Aug 2025 07:00:56 +0000
Manifest next update: Tue 05 Aug 2025 07:00:56 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: 81J6bG2gP/9QB9TUg1wDeOxrwNSB+RAG1/6//wymD6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:21:e0:d9:81:db:5b:c5:82:75:2a:02:0c:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Aug 4 07:00:56 2025 GMT
Not After : Aug 5 07:00:56 2025 GMT
Subject: CN=29684ff5d822954a408dba6f198a3ae28d3a728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:1e:09:35:50:be:d6:67:69:07:34:87:9b:
11:0d:66:06:93:39:63:89:c6:a9:0c:1f:cf:a2:83:
e9:79:d8:d7:0c:9e:dc:a2:19:5e:9a:0d:ed:bc:4e:
c6:b3:6c:08:32:e0:42:0c:97:9c:6e:f9:23:e4:8f:
33:82:e6:14:c5:bd:16:ad:ea:7e:1b:a9:54:1c:c2:
8f:8a:f2:b3:c4:bf:1f:4c:51:d8:d5:1a:59:88:6c:
b0:35:e0:42:b0:37:7f:67:29:bd:44:b2:27:2e:2e:
b0:72:bd:bb:ad:48:11:fe:ad:a6:fb:02:7f:b1:17:
30:da:da:b1:8d:d6:90:82:52:88:0c:0e:cb:b6:1b:
6a:21:18:0a:33:17:66:55:76:a6:ab:bc:c3:6e:6f:
d0:5e:8d:28:3b:a8:85:d5:69:bf:05:32:76:b5:c9:
d6:b4:23:b7:a7:16:30:29:e9:39:8b:17:78:ec:72:
b8:b6:4e:1d:42:5d:e2:57:ac:83:75:e7:6c:f9:5f:
fc:ba:b3:74:3a:4c:b9:30:a5:68:8e:b4:9e:8e:1b:
cb:6d:25:80:9f:33:18:04:c7:8d:26:58:4c:0c:8b:
3f:41:5c:8e:17:36:54:00:f5:29:d2:70:79:35:8c:
80:57:15:5f:df:be:e4:fc:d3:e2:2d:46:e1:ad:de:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:4F:F5:D8:22:95:4A:40:8D:BA:6F:19:8A:3A:E2:8D:3A:72:8F
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:f4:65:53:30:fc:7c:cc:d5:c6:10:69:e2:e2:25:a8:b3:
95:cc:db:34:9e:bb:af:b5:e9:c6:9a:7a:2c:5f:ff:90:ea:58:
eb:46:a6:1d:e6:9c:ad:26:53:51:2c:5e:d2:4d:41:04:f2:5b:
a3:43:83:57:48:9d:50:97:dc:93:b8:8a:e2:20:d7:0c:96:4b:
ea:83:11:ae:08:42:9d:70:ef:b3:87:50:ab:38:69:ec:d8:77:
72:9e:e9:72:d7:81:a8:52:75:01:0b:31:aa:e6:91:93:13:95:
ce:6a:62:7d:af:46:d1:97:71:b5:91:53:61:57:0d:30:ce:96:
45:f7:25:54:fb:c5:4a:b6:25:b3:04:2a:ae:b7:46:df:1e:1a:
42:24:ca:be:b5:23:75:35:42:61:68:21:36:c3:13:03:f7:83:
98:d5:80:d9:b4:0c:07:76:9d:d8:3d:88:e0:77:a9:42:82:a2:
79:a4:31:e7:c9:2d:b5:91:65:94:d2:94:04:0a:e6:15:40:2e:
1c:d8:bc:e5:c9:26:4e:28:98:32:98:b4:06:79:74:b2:b1:e8:
65:70:90:d7:34:2c:98:d9:47:57:2a:d3:ca:74:6e:a6:e8:5e:
10:84:17:6c:02:30:45:13:8b:12:01:a9:fa:ae:3e:b8:39:3a:
64:9e:af:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4iHg2YHbW8WCdSoCDEiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzYwZDRkNDU4Y2VjM2I4ZDYxOGEwMTMwMDY0MmI1ODhj
MzE3M2IwHhcNMjUwODA0MDcwMDU2WhcNMjUwODA1MDcwMDU2WjAzMTEwLwYDVQQD
EygyOTY4NGZmNWQ4MjI5NTRhNDA4ZGJhNmYxOThhM2FlMjhkM2E3MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR4eCTVQvtZnaQc0h5sRDWYGkzlj
icapDB/PooPpedjXDJ7cohlemg3tvE7Gs2wIMuBCDJecbvkj5I8zguYUxb0Wrep+
G6lUHMKPivKzxL8fTFHY1RpZiGywNeBCsDd/Zym9RLInLi6wcr27rUgR/q2m+wJ/
sRcw2tqxjdaQglKIDA7LthtqIRgKMxdmVXamq7zDbm/QXo0oO6iF1Wm/BTJ2tcnW
tCO3pxYwKek5ixd47HK4tk4dQl3iV6yDdeds+V/8urN0Oky5MKVojrSejhvLbSWA
nzMYBMeNJlhMDIs/QVyOFzZUAPUp0nB5NYyAVxVf377k/NPiLUbhrd4ocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCloT/XYIpVKQI26bxmKOuKNOnKPMB8GA1UdIwQY
MBaAFJfGDU1FjOw7jWGKATAGQrWIwxc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2Yt
N2MwMzYxNzgxMjZjLzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYjRiMTctYWE2Yi00ZmMyLWEwM2YtN2MwMzYxNzgxMjZj
LzEvbDhZTlRVV003RHVOWVlvQk1BWkN0WWpERnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnir0ZVMw
/HzM1cYQaeLiJaizlczbNJ67r7Xpxpp6LF//kOpY60amHeacrSZTUSxe0k1BBPJb
o0ODV0idUJfck7iK4iDXDJZL6oMRrghCnXDvs4dQqzhp7Nh3cp7pcteBqFJ1AQsx
quaRkxOVzmpifa9G0ZdxtZFTYVcNMM6WRfclVPvFSrYlswQqrrdG3x4aQiTKvrUj
dTVCYWghNsMTA/eDmNWA2bQMB3ad2D2I4HepQoKieaQx58kttZFllNKUBArmFUAu
HNi85ckmTiiYMpi0Bnl0srHoZXCQ1zQsmNlHVyrTynRupuheEIQXbAIwRROLEgGp
+q4+uDk6ZJ6vnQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:00 2025 by rpki-client