Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: rPU6R7ZYTYcbRc9lp5F9e0Rh2c8q9uxhxVePkhDj9n4=
Subject key identifier: 48:24:20:47:91:F8:8B:EE:0D:7E:A2:79:6A:A0:37:17:53:E8:76:4B
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 01987B9C85DF2D7800E65EACA95581DB84AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:01:51 +0000
Manifest this update: Tue 05 Aug 2025 19:01:51 +0000
Manifest next update: Wed 06 Aug 2025 19:01:51 +0000
Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: V0DjvUtr+9IEa0z8OV9/j+n4tflh0pFPIP8wzN7k/x8=)
2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:85:df:2d:78:00:e6:5e:ac:a9:55:81:db:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Aug 5 19:01:51 2025 GMT
Not After : Aug 6 19:01:51 2025 GMT
Subject: CN=4824204791f88bee0d7ea2796aa0371753e8764b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:f6:19:c6:2d:1b:a2:ee:05:eb:f0:98:c0:
3a:fe:a7:27:f5:dc:90:a8:2a:24:8d:b6:bc:3d:3e:
dd:9e:85:07:2a:27:34:a7:cf:4d:a5:dc:58:5f:61:
c6:e7:d4:f6:55:ce:6a:19:3e:fc:a5:64:00:b5:aa:
1f:f6:97:a9:47:7f:69:a3:34:13:8b:94:f6:fb:47:
b4:e6:32:4e:d0:49:87:7e:3c:82:6f:24:9e:e1:75:
42:e4:8a:79:df:e9:58:d3:99:a1:cf:86:d7:97:47:
31:77:3d:32:49:3e:f8:07:a9:aa:b2:ba:9d:11:af:
3c:55:5d:f0:ac:3e:3a:5d:6f:84:3b:2a:90:2e:bc:
80:fa:f7:64:4d:79:9a:99:84:0b:68:9c:75:24:cd:
d9:47:ea:78:c3:d5:98:2c:c9:13:39:80:b5:03:43:
33:3a:42:43:db:be:95:9f:dc:5d:dc:f5:39:9d:4b:
75:22:81:4b:c1:1f:49:89:24:a8:14:d4:2d:dd:73:
d4:1e:11:a9:78:cb:24:36:c8:98:67:62:2c:7e:e2:
35:2e:93:8c:98:40:df:0a:e5:f0:6f:06:8c:c9:a8:
d1:f2:5f:5c:65:6b:9c:02:d3:e2:43:3e:4e:3f:04:
c0:67:16:0a:a6:f8:4f:f9:ef:00:9c:33:24:69:f3:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:20:47:91:F8:8B:EE:0D:7E:A2:79:6A:A0:37:17:53:E8:76:4B
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:81:2a:86:4f:a7:ec:04:25:4f:65:45:9b:1e:9c:1a:42:3d:
42:96:99:70:ab:36:df:d3:ef:90:b3:1c:01:e5:2d:a6:68:8c:
20:84:b5:ff:b7:6e:58:e9:bd:82:79:f1:e1:61:82:7e:f6:b2:
f4:d0:f5:3c:3b:f8:24:1a:ce:1b:53:c6:4a:a5:cd:62:37:61:
7a:92:d5:6a:2e:31:74:54:ee:36:b9:d6:a6:f1:55:fb:8d:83:
23:76:b4:78:a3:f5:8b:66:e5:22:19:ca:f7:f7:b7:65:aa:6b:
64:f7:25:4f:2e:02:69:ab:bc:b5:a3:2d:1f:35:3b:fd:bd:9a:
3b:76:f1:d1:0b:91:21:bf:69:ea:69:c1:77:e6:3d:4a:60:db:
3d:e5:ae:65:8a:10:3a:35:ef:d0:2b:12:4d:ad:b2:3f:9e:a8:
d3:ff:1c:0a:ee:a6:92:b8:4c:d2:9f:7e:04:d1:97:21:7c:68:
6a:35:3a:9f:85:80:10:71:47:13:9b:21:07:77:9b:0a:be:5f:
3c:61:9b:47:67:24:a1:a2:c6:60:e9:a5:cf:d9:14:14:71:96:
2f:6d:f9:0c:12:6e:35:c3:58:bf:06:82:3f:90:bc:b2:c4:e6:
2f:62:b5:f7:62:f7:be:eb:3c:45:68:73:9b:1f:d0:65:bd:35:
3e:17:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:12 2025 by rpki-client