Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: QM7a8ghORT//ccfzu4eOY8KskvpLIOrP/JQmx79qdIk=
Subject key identifier: A7:36:B3:63:4B:0A:CF:56:2F:F5:AC:57:78:A4:50:1E:8C:D7:A5:B0
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 01987450A2C1681ADC72A6C1D8132720164D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: 9ThKcwVgmfgyBxMXa36jYexFKw4faDu3sD6wQoaISiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a2:c1:68:1a:dc:72:a6:c1:d8:13:27:20:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=a736b3634b0acf562ff5ac5778a4501e8cd7a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:30:2f:21:9e:11:c2:8f:92:52:3e:7c:82:
f0:e4:c0:dd:f0:c8:e9:5b:e3:41:cb:3d:ca:ef:d0:
d1:41:91:92:34:ec:84:91:6c:f3:eb:ec:3b:a8:18:
8f:7f:1b:d3:94:ae:c9:a3:5d:2d:f9:bb:c1:0c:e5:
3c:a0:9c:a6:61:b4:31:82:ec:e7:b1:00:28:6d:f2:
fa:ad:e5:fe:00:f7:7a:ed:34:f6:ee:84:cf:6e:6a:
06:6f:40:2f:5e:6f:1d:5d:8c:2a:bf:4a:6c:10:38:
6c:eb:cd:24:8a:41:d6:cc:6d:03:4e:13:a0:bf:b4:
df:56:26:01:cb:38:87:af:01:19:dc:83:1b:31:f4:
2d:0a:72:a2:04:45:92:e7:c1:ea:f8:b9:cb:db:1f:
e7:35:e5:51:ad:f7:e3:08:07:89:ef:0d:a5:5f:0b:
2b:3d:7d:5c:43:71:27:9a:6f:8d:89:df:75:5b:98:
c4:1b:9b:18:12:aa:62:90:2a:c1:af:54:40:b3:c3:
e8:f0:59:8e:3f:0b:96:c1:ce:98:4f:11:a0:f1:fe:
20:e8:44:e1:35:76:0d:9b:29:06:b7:49:7c:8e:92:
c1:ba:68:90:25:53:90:e1:23:a7:b8:50:be:f8:98:
b8:4f:92:ba:84:c2:30:aa:32:5f:9c:54:01:70:f8:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:B3:63:4B:0A:CF:56:2F:F5:AC:57:78:A4:50:1E:8C:D7:A5:B0
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2f:08:38:7b:ba:f6:cf:9c:45:88:3c:5f:1a:0d:ac:e3:f6:
90:6a:33:df:37:4e:7f:a1:f0:d4:ed:d7:0c:a1:f2:91:ed:50:
89:fc:5a:a2:ba:14:dc:d9:cc:a8:72:7d:40:dd:9c:06:8c:d8:
44:e9:91:9f:bc:0b:b8:e5:ce:52:2d:31:de:1e:02:ba:7e:f0:
19:b0:d2:5e:d9:ea:6a:e2:c7:ef:09:26:d4:bc:15:f4:8b:66:
ed:09:00:34:ad:e8:0d:4b:0a:39:e2:7e:af:40:eb:68:19:39:
cc:59:d4:d8:20:03:84:04:22:8f:37:33:1c:cb:24:7c:2d:78:
f8:03:5b:16:64:83:9a:08:70:59:b6:46:9b:f1:88:54:2c:6f:
93:50:cd:c0:d9:1f:bf:19:17:6d:84:1f:7e:9c:0a:bb:79:24:
4f:4f:04:81:10:4c:f7:b4:ab:47:1d:4b:36:93:db:55:c6:c6:
b9:08:c2:49:11:4a:20:cf:c5:c6:ee:e6:b2:61:49:57:e6:c5:
38:9c:4b:79:5a:64:91:5e:58:d4:95:15:f0:db:37:da:52:c2:
8d:5e:01:79:4e:b0:6b:4c:df:d7:b7:ab:27:9c:27:79:9b:ea:
d1:c8:9e:76:e5:fc:9b:00:d4:db:5c:f0:52:c6:91:a1:ca:47:
3f:f8:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:50 2025 by rpki-client