Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: lHz/LLgQQ689Hzv4Zy8vn7s2CS02iGvSOQHm/bTyUJI=
Subject key identifier: 73:E2:99:7A:F9:0C:0A:4B:77:4C:5A:63:3C:51:54:06:4E:30:BC:E4
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 0198819E469E07D6CB54D1F5B977E9F41534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 05D1
Signing time: Wed 06 Aug 2025 23:01:30 +0000
Manifest this update: Wed 06 Aug 2025 23:01:30 +0000
Manifest next update: Thu 07 Aug 2025 23:01:30 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: i0fDWK1UX1iQpRlXmGygaZcdY2dfor4/NHGtrKdVtKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:46:9e:07:d6:cb:54:d1:f5:b9:77:e9:f4:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Aug 6 23:01:30 2025 GMT
Not After : Aug 7 23:01:30 2025 GMT
Subject: CN=73e2997af90c0a4b774c5a633c5154064e30bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:c0:a4:e0:27:b8:75:68:5a:96:16:10:f1:
b7:95:79:ce:25:7e:cc:86:39:25:ef:bd:c8:e7:63:
ee:33:56:1d:db:86:9f:da:bb:5a:56:35:2f:cd:d7:
f8:2e:0a:d1:14:95:19:a3:4a:21:ee:e2:14:6e:cd:
96:46:39:76:46:e3:6c:0a:24:25:c4:e6:49:a0:60:
b6:a5:f9:03:8f:1b:28:3a:ee:32:a4:f9:a1:d5:71:
a6:a0:de:30:ab:92:4e:39:67:03:d1:20:ce:7d:13:
9f:f2:4a:c1:e6:73:65:86:44:4c:eb:c5:3d:21:0f:
f4:2a:df:af:5d:f8:ae:4d:c2:d2:f3:f8:ad:d5:05:
4a:d4:76:76:bf:1a:98:e2:d9:70:f4:b4:49:5f:29:
b8:8d:e7:30:d9:96:92:eb:62:8a:74:1c:95:96:24:
c8:38:59:64:6c:01:39:90:d8:48:c7:99:4f:7d:18:
d7:16:b7:2b:26:fc:2e:15:f0:89:c9:b0:f0:00:77:
02:28:ef:c0:c1:ae:eb:7d:19:85:07:51:65:27:7e:
40:a4:f2:5b:56:fd:2e:8c:e8:e5:93:8d:4c:57:98:
6e:9e:a5:cf:c5:62:54:43:34:7d:d6:e2:e7:f5:bf:
59:bd:ca:80:c2:2d:c3:75:ff:b7:78:68:71:90:7a:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:99:7A:F9:0C:0A:4B:77:4C:5A:63:3C:51:54:06:4E:30:BC:E4
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:50:d1:cb:2c:b2:06:ab:5d:56:19:68:c8:94:53:41:e8:
51:31:c1:89:9a:87:47:24:22:bf:2a:de:36:4f:67:bd:f2:c2:
7b:00:d9:a8:c5:06:59:d9:28:87:47:af:f4:8e:4c:04:5a:2c:
d8:86:67:0a:be:22:72:89:ca:46:95:c2:fb:4f:a5:75:9f:4b:
4b:a9:ab:15:50:2a:52:da:c8:30:c6:15:14:35:90:74:70:60:
57:83:0b:93:80:a6:82:6c:1a:b4:03:c4:e9:f2:e2:e5:8c:25:
80:23:83:24:70:f1:3d:71:a5:35:3b:5c:c7:c3:fd:c1:2e:a0:
d4:1f:e1:64:33:70:18:49:0a:a4:5e:0f:32:39:72:1d:cc:74:
92:1b:a6:a5:28:5d:62:b5:e7:69:40:ce:0b:f7:07:41:bc:04:
04:74:c3:ff:9e:7e:44:3f:de:a2:5f:fe:ed:76:95:0c:2f:b4:
7c:a1:60:3a:d0:18:a1:a3:81:51:0d:7d:e5:90:4e:29:fa:d8:
70:96:34:1a:89:98:ff:3a:d3:61:52:38:27:7d:90:49:ec:e8:
c9:37:c7:13:aa:50:f3:75:13:bc:a7:7c:01:25:39:5e:e1:ba:
98:17:2c:c9:a5:b3:da:f8:f4:e1:a6:d9:ac:08:b6:f4:df:13:
58:8e:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:07 2025 by rpki-client