Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: olmrwJqfaMsLVHX97VPt95Dt5osupmoArRwUybvZ8cY=
Subject key identifier: 2F:86:88:B9:E8:A9:6D:5B:38:79:46:AA:AD:E4:31:E4:2E:62:67:0E
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019874506BCB702060E16574597A8F2C920B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 162C
Signing time: Mon 04 Aug 2025 09:01:24 +0000
Manifest this update: Mon 04 Aug 2025 09:01:24 +0000
Manifest next update: Tue 05 Aug 2025 09:01:24 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: qLBZOyzOvhNI1XGL0pwTZOnc2FJJNDbVVX5eQhHGj0U=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: kU21zPj_cDfQp59eNGbfgPnOKEw.roa (hash: KKCABhY5ZDh0u6CmKvmilt9DAebFs3J5DYDRFE17Ifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6b:cb:70:20:60:e1:65:74:59:7a:8f:2c:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Aug 4 09:01:24 2025 GMT
Not After : Aug 5 09:01:24 2025 GMT
Subject: CN=2f8688b9e8a96d5b387946aaade431e42e62670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:ea:f0:de:58:b4:13:8a:93:57:26:7f:bf:
15:8e:b3:d7:5b:b2:e3:c7:04:a0:10:57:aa:4b:9c:
f8:a3:1f:cb:77:8f:d2:b1:64:7f:5c:5a:2a:6f:51:
9b:27:91:df:77:40:bd:ef:01:2d:0f:df:12:48:6d:
eb:f2:4b:8b:24:74:8d:c4:01:22:c4:e5:f6:6a:f1:
22:65:ca:b1:aa:d4:5c:cc:af:5e:47:8d:bc:53:cf:
96:7e:52:1f:f2:98:7e:e6:4d:95:9e:e3:87:a8:73:
db:45:43:4d:88:3e:21:c1:1f:4b:fc:97:17:0e:d9:
fa:c3:ea:a1:fa:95:33:a3:f3:b8:b7:ee:f8:16:44:
77:5d:af:61:a4:ec:0e:66:b8:76:14:31:4b:60:31:
02:7a:43:a1:a7:a0:1d:e2:e1:05:ea:70:45:f3:35:
86:ad:35:36:d9:e1:d9:32:55:7a:53:e5:d0:c3:6d:
00:8c:a5:1a:f1:24:51:b8:c2:00:b7:36:14:2f:a2:
2a:1d:a4:3a:df:89:86:4d:14:e3:32:36:5b:62:18:
59:2d:67:fb:90:54:e1:ad:93:21:95:1c:84:44:89:
00:b4:f9:1c:50:7c:9d:90:18:ef:b8:37:f8:bc:95:
92:c3:d6:d0:9a:57:99:c1:62:a7:8d:09:c1:2b:23:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:88:B9:E8:A9:6D:5B:38:79:46:AA:AD:E4:31:E4:2E:62:67:0E
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:71:3e:13:bb:cd:a9:cd:56:ba:ef:92:9a:2a:be:dc:a2:
c9:ca:39:ec:75:8e:1b:87:61:11:09:38:78:05:09:30:59:21:
40:eb:b9:2c:25:16:c4:15:8f:44:d1:0d:97:ed:83:f3:2a:76:
61:8b:38:14:05:84:5d:b9:d4:83:b7:1d:e8:8b:55:9a:6c:7e:
cc:f9:51:b6:82:0e:cc:4d:e4:97:77:d8:56:13:76:6b:81:ae:
da:a2:6b:39:02:82:c6:0a:a6:f5:1e:00:70:3f:40:d3:bb:cb:
ed:03:1d:32:53:54:84:a9:b7:1e:d1:3f:5a:37:8b:fe:4f:f5:
4d:8a:30:39:45:75:34:87:9b:e3:cb:27:2f:7f:21:45:1d:74:
63:0c:d5:b6:6c:4d:fa:cb:8b:26:bf:dd:ee:e6:40:e7:cb:a6:
f3:df:89:b3:6e:89:35:95:8d:22:23:a2:5a:70:19:8a:3c:7a:
39:a0:dc:ac:49:4b:11:e0:b6:a5:cb:43:08:74:a8:37:50:20:
e2:2f:40:6b:2c:d9:ac:7d:cb:b2:52:71:fc:41:76:49:3e:3a:
62:ed:30:4d:7b:2d:80:f0:6c:49:67:47:61:ae:e7:da:a0:f6:
d8:4d:55:77:3a:52:e2:7f:51:34:70:ce:1f:6b:c0:6e:4f:0a:
e9:11:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:23 2025 by rpki-client