Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: 7erwqHq4fYeALn2jkqALnXoAd4zNBcqxj8MMzHxKa9M=
Subject key identifier: F5:42:D8:4A:3B:50:80:96:1C:1D:62:A0:20:4C:DA:B2:C7:D4:39:F7
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01987418F688355B3120C47B2015A1C37994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: ys8MuxPVe0zqECHiBBW9YXHJPo8cEvb0H3zfg/YRh38=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f6:88:35:5b:31:20:c4:7b:20:15:a1:c3:79:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=f542d84a3b5080961c1d62a0204cdab2c7d439f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:2d:17:a3:a1:7e:e5:b9:36:8f:0a:9a:90:
9c:eb:bf:75:06:f4:f5:d2:d3:a5:2a:c5:6d:e5:07:
0f:1c:a8:e2:26:c6:96:8b:26:db:37:b8:65:65:ef:
96:52:a4:c4:7b:76:73:57:eb:b7:32:0c:8f:25:99:
5f:93:ad:76:01:ca:38:45:38:35:bc:b9:89:58:fb:
33:91:e1:b5:6c:76:42:f6:ac:e0:5e:02:d5:1b:f5:
a7:85:05:27:71:5c:6c:42:0d:40:94:71:9c:1d:01:
a9:2c:31:b7:c5:9f:9c:3a:63:a4:e3:5a:22:01:a9:
2b:8c:54:96:a6:1d:c3:a4:f9:cf:bf:3e:c4:ec:b5:
6f:bb:f9:10:7f:75:14:fc:2b:b3:f7:f4:66:dc:15:
73:18:42:ff:6f:99:63:b2:03:79:bb:00:20:9a:df:
23:0e:cc:61:30:b3:71:a9:13:f8:ee:72:81:80:b0:
9b:ce:af:4c:d3:19:2b:8f:2e:06:f1:18:b9:d2:a4:
a8:11:83:c4:12:de:4f:be:0f:18:c6:01:61:af:3a:
84:8d:9c:25:b6:71:00:63:7e:60:42:c6:d4:4b:82:
bc:87:55:56:0d:03:23:4e:ad:be:c2:aa:8f:20:d8:
18:17:ca:6b:0e:c9:3e:ba:b5:98:cb:3c:b5:f3:c0:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:D8:4A:3B:50:80:96:1C:1D:62:A0:20:4C:DA:B2:C7:D4:39:F7
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3f:70:94:f8:3b:37:ca:72:13:9e:88:fe:38:b1:1b:09:26:
a8:b0:83:7b:c8:af:70:ee:0c:1a:72:5f:fe:a9:87:9d:54:16:
33:aa:6e:e1:cc:f1:e4:cf:41:ab:d0:fe:9c:13:71:e9:4f:1b:
2e:1e:5b:41:45:d5:1c:28:9b:7f:47:01:72:d5:e1:5d:bd:0e:
2e:16:c5:a6:1e:f2:98:44:df:51:2e:a2:94:bf:cf:a9:a9:91:
62:84:3e:9b:be:f4:ae:bc:f8:74:c2:10:6e:84:55:51:1c:74:
79:34:7b:26:0c:a0:78:6b:e1:12:4c:ce:56:99:bd:36:97:8f:
57:db:b1:8a:bf:14:e7:ee:b2:81:06:9e:06:2e:01:19:91:f6:
ac:f6:a1:a7:25:48:c8:b7:4e:5b:db:d8:8b:33:56:88:bb:11:
b8:75:4d:4d:c6:23:9f:77:02:cd:a3:fb:88:a4:91:c5:fe:61:
07:86:1f:db:5d:8d:13:55:4d:17:e2:6b:89:88:41:f1:9c:4c:
7a:71:39:49:f2:c8:80:a8:88:ce:7f:b5:f2:aa:db:b0:4d:10:
11:52:da:23:7b:30:c1:49:90:1e:89:b8:3d:b1:61:cc:69:c3:
06:f3:bf:b4:74:65:e0:03:28:77:98:85:d5:d7:6f:97:46:92:
6a:7e:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:47 2025 by rpki-client