Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: JUV7RdYATHfS8Sv45UmTsB1d6IRd5lhm1j22teZ5ZsM=
Subject key identifier: AE:E0:DA:E6:96:74:3B:B3:E6:03:DB:22:BD:22:C7:F5:D1:19:E6:32
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 01988EEC34B9786C373ADE4CFBB7D21BFA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 113C
Signing time: Sat 09 Aug 2025 13:01:41 +0000
Manifest this update: Sat 09 Aug 2025 13:01:41 +0000
Manifest next update: Sun 10 Aug 2025 13:01:41 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: wSM43buNWmMzHrIQDhxQMV1c+QFiAFzr73SfFNP8H9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:34:b9:78:6c:37:3a:de:4c:fb:b7:d2:1b:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Aug 9 13:01:41 2025 GMT
Not After : Aug 10 13:01:41 2025 GMT
Subject: CN=aee0dae696743bb3e603db22bd22c7f5d119e632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:e9:0d:76:6d:d3:a2:52:71:b4:6d:9a:b3:
cd:31:6c:0b:70:be:49:fc:6a:24:00:17:f4:25:33:
69:2d:5d:14:b1:4c:de:43:15:ce:e4:c5:62:fb:c6:
8f:41:aa:85:fe:f7:b9:31:0c:15:cb:10:7c:9a:03:
68:3f:38:ed:4a:45:b2:f4:3e:ac:e8:0d:1d:a1:f4:
df:d4:5d:87:c5:39:50:53:f9:ce:79:e5:95:67:5e:
6f:7c:46:a1:72:45:91:25:e0:57:43:04:40:8c:bf:
63:e3:f6:00:62:6b:4b:9a:98:2e:0c:c6:5d:40:3a:
b4:a5:2e:f0:06:bf:94:25:03:ae:18:1b:13:48:09:
32:05:b5:70:00:3f:2f:8f:af:4c:af:0c:b2:b0:46:
eb:c4:ab:8a:2b:fa:f8:35:ef:23:1e:de:26:25:9d:
13:ac:b3:81:e4:1c:1f:e5:e7:01:a5:dd:3e:a7:90:
29:32:e4:3f:88:4b:de:6d:53:5e:b7:5b:ef:44:7d:
14:57:07:13:b7:2e:68:ec:e7:bc:80:03:84:0f:7c:
c9:f7:89:ff:ff:a1:33:76:e9:56:16:a7:81:fb:60:
94:9a:e6:29:e6:c8:00:8a:8a:ac:6f:7f:89:e7:a3:
3b:59:e3:6a:6b:c3:6a:94:99:c6:2b:87:48:71:89:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:DA:E6:96:74:3B:B3:E6:03:DB:22:BD:22:C7:F5:D1:19:E6:32
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:c0:79:1d:ec:fd:c6:0b:a3:37:30:c7:e8:88:2c:84:e8:
05:f3:fc:4e:c8:9e:6b:93:d5:7a:6c:02:52:9f:da:22:e6:05:
99:67:8e:08:0c:39:3c:fb:f0:4c:69:2e:41:1c:67:aa:ba:2d:
00:f6:d7:68:33:38:c2:fb:fb:9c:00:1e:13:45:a4:07:88:ff:
48:ba:ab:b7:96:de:23:31:65:d5:07:16:8b:4b:8b:15:20:5b:
f7:b3:1d:a9:8d:66:f4:13:03:fc:55:fc:37:34:3c:7a:3f:ab:
8e:f8:90:fa:b5:0c:ca:aa:6b:d2:b6:60:89:77:95:13:89:e1:
ce:7d:f1:c4:37:5a:a2:dc:99:84:95:aa:da:fa:e5:f4:1a:c1:
db:eb:37:4a:e5:ac:e4:2b:34:51:c5:ab:30:4e:56:b8:42:fe:
c8:d1:4a:b9:e2:55:d7:01:d0:00:5d:b4:62:34:b3:b4:b8:20:
24:23:77:58:c6:5e:97:27:2b:04:be:00:8b:45:db:e7:e2:ce:
80:22:a0:5d:36:3b:63:89:61:99:03:b4:31:16:2d:44:73:a3:
2e:05:9b:53:37:e9:bb:92:5d:c8:b1:ce:8d:da:db:f0:93:04:
bf:5e:df:89:98:08:03:29:69:2f:88:56:d6:7b:18:12:48:07:
66:47:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:04 2025 by rpki-client