Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: GDZFVkdEhgLzirZTyArKaKNhwLcmQjANCvyS3eO4BR8=
Subject key identifier: E1:0D:2C:DC:A6:ED:AE:E2:10:AF:6A:EC:10:98:EC:87:78:98:CB:41
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019874F48C32B7C3D4F9F5239DD6BB610F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 05C3
Signing time: Mon 04 Aug 2025 12:00:40 +0000
Manifest this update: Mon 04 Aug 2025 12:00:40 +0000
Manifest next update: Tue 05 Aug 2025 12:00:40 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: H28AU4RhpnTkkCcnbGk0M3SzyvIothvQfsebQSM+nhU=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:8c:32:b7:c3:d4:f9:f5:23:9d:d6:bb:61:0f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Aug 4 12:00:40 2025 GMT
Not After : Aug 5 12:00:40 2025 GMT
Subject: CN=e10d2cdca6edaee210af6aec1098ec877898cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:f0:3b:4c:4c:54:43:1c:15:71:45:60:3f:
96:bd:a0:7d:0b:4e:b6:cc:dc:47:b5:61:bc:36:5b:
b5:4f:f6:91:e5:d1:20:42:91:7d:94:0a:36:a5:39:
05:d5:91:4f:1f:ea:d4:51:e8:14:3b:66:d8:fe:2c:
e4:c4:94:8d:51:09:1e:44:37:e9:6c:5e:c6:44:de:
ff:5c:63:6a:33:03:38:2f:8f:2f:b1:20:a4:32:85:
41:2b:f9:d3:d7:a7:bb:52:15:ea:4f:ec:a8:ae:3d:
40:d0:7d:7e:8e:46:ac:d4:15:f4:6b:10:08:98:0c:
9f:13:f4:cc:37:a6:14:4a:44:62:cd:4c:3a:a8:ff:
bd:ad:03:ed:6b:bb:b3:f4:43:e2:4c:d8:d7:ac:74:
89:11:99:e6:1f:f0:30:5b:b6:05:de:c1:0b:f6:08:
7e:94:ab:a7:86:1c:bc:30:ee:68:2e:eb:38:02:f0:
00:77:26:fa:76:29:20:f7:10:c0:02:ab:5d:33:80:
0d:a6:87:46:81:32:6f:b3:b5:aa:a5:4a:9f:94:5c:
12:52:d7:8e:dc:5e:66:21:4c:ed:6d:3f:85:0a:50:
df:c4:51:92:11:ea:94:17:3b:f8:54:54:b7:26:21:
21:5d:a8:94:00:6a:15:5f:1d:0c:ec:db:da:c1:da:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:2C:DC:A6:ED:AE:E2:10:AF:6A:EC:10:98:EC:87:78:98:CB:41
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:32:1d:ca:60:f2:d8:bb:41:6f:c4:00:b5:b5:28:23:7f:
92:21:3b:9c:4f:b9:b2:64:34:99:ce:4d:c2:e5:5f:a7:6a:fd:
34:a2:8c:3a:86:15:47:89:ac:d1:65:3c:2e:54:09:55:23:cc:
80:eb:2e:dd:b3:dd:dc:13:36:03:fa:e4:45:32:a7:9c:3d:f1:
4a:46:81:fc:b8:28:54:1f:81:1f:33:2b:8f:f7:72:9d:4a:0a:
9f:1e:96:12:c6:00:09:77:27:84:1c:50:7a:7e:4d:19:a6:67:
04:7c:70:05:83:22:85:6e:7a:7a:24:ee:e9:91:d9:5e:16:a9:
8d:57:42:ee:64:08:85:1f:40:7d:da:6e:c8:11:a6:33:ed:b7:
1e:3a:33:34:62:45:5d:3f:4a:c4:f7:31:a4:4e:4f:4e:58:52:
51:f6:8a:b8:76:33:c5:4a:5d:d2:31:df:82:ba:95:d8:9a:44:
ff:10:b0:08:ad:45:80:78:e5:f2:80:d9:86:19:69:7e:e6:fd:
57:b4:ce:20:21:45:75:7c:31:73:3f:15:f8:82:58:aa:c7:0c:
41:98:52:ec:fb:16:96:32:4c:2a:43:e5:a3:69:ef:1c:d6:67:
33:49:62:3d:c6:fe:b0:9f:69:6c:67:bb:dd:7d:78:d6:6b:3a:
dd:16:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:20 2025 by rpki-client