Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: bmYsltikR+5vqsa5G1DANKrrceUHmeux1dVL3tE7lc4=
Subject key identifier: 4A:94:BC:10:A3:CF:10:57:8D:90:7B:5C:69:49:12:2C:89:7E:02:9E
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 01987ED3E923A7D694B8379E3D721A3628D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 029A
Signing time: Wed 06 Aug 2025 10:01:13 +0000
Manifest this update: Wed 06 Aug 2025 10:01:13 +0000
Manifest next update: Thu 07 Aug 2025 10:01:13 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: 6qRzpn6CSpuscSi25wj+FEYJzB6UqkvqE71ELsg/kx4=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:e9:23:a7:d6:94:b8:37:9e:3d:72:1a:36:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Aug 6 10:01:13 2025 GMT
Not After : Aug 7 10:01:13 2025 GMT
Subject: CN=4a94bc10a3cf10578d907b5c6949122c897e029e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:7a:fc:1a:6d:f2:d0:b8:19:53:21:70:15:
5e:b6:8e:d3:25:7b:4b:d7:ee:ea:5c:3b:db:db:09:
a9:ba:43:ce:2b:df:9b:6c:d5:64:2c:b2:1c:d4:f8:
be:df:fb:92:58:83:69:28:0c:8b:2c:d0:59:7e:fb:
c3:c6:23:94:b8:55:b2:6e:77:f3:51:5a:d0:b1:54:
72:c4:3a:7f:90:74:91:39:dc:68:aa:99:ea:a1:d3:
42:95:16:4a:9a:4a:9e:82:e6:86:06:91:80:af:83:
20:f3:3f:e9:6a:4f:ad:88:55:ad:8e:21:78:08:28:
aa:26:24:ea:4e:2e:b7:84:bc:56:94:04:4e:0c:7d:
88:80:0c:97:52:62:b1:74:79:10:27:58:c5:46:25:
e9:8a:4b:60:5a:f0:58:9a:5f:96:77:6b:48:82:34:
a3:89:a6:87:eb:fa:85:bc:88:91:8c:56:76:7a:dc:
80:0e:00:28:83:01:b6:13:2c:e3:f4:64:6a:b9:1d:
e5:56:30:7f:db:7a:c5:38:4c:a1:83:74:a5:67:86:
d7:eb:ed:f0:e7:80:35:c6:c2:a4:8c:ab:ed:f9:18:
2f:fe:80:27:76:f2:e1:cb:a8:25:b0:91:80:68:3b:
13:34:c7:5b:b9:c5:d7:c0:f8:d3:30:c6:29:7f:27:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:BC:10:A3:CF:10:57:8D:90:7B:5C:69:49:12:2C:89:7E:02:9E
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:3c:1f:7a:c5:8e:b7:79:ea:77:ee:23:55:8a:20:79:27:3a:
9b:f6:63:c8:d6:33:d6:66:b6:3c:87:a4:75:6a:b4:82:de:19:
2f:40:00:90:5c:06:60:c9:00:51:2e:36:d9:fb:31:78:8e:10:
9e:44:10:b2:4b:ee:e4:c3:9d:8f:1d:85:df:f8:ad:c7:c3:0b:
b9:8f:ff:18:d1:77:a6:71:4a:ba:5c:7d:f6:96:de:ea:50:90:
e4:3e:6f:20:43:b9:80:2a:2a:cf:a5:d0:ab:33:e7:64:d3:09:
94:92:ab:44:9a:d3:94:45:ff:e4:9e:32:7b:68:74:ba:f4:a2:
00:7a:83:37:17:04:3a:65:0b:05:87:54:f4:d2:1c:7b:a2:ea:
e1:3b:d9:2d:1a:d3:d4:9f:d8:e7:eb:69:f1:00:30:c9:0f:52:
02:31:08:57:1d:e2:ed:4a:3b:97:7e:ad:a9:5e:6e:24:a2:a1:
8e:40:57:c3:42:bb:71:96:b4:a6:bb:bd:85:20:43:2f:1b:90:
32:96:05:96:af:f9:1e:8f:d7:b2:93:08:98:30:28:2d:58:7f:
a8:aa:5d:e5:8c:a6:cc:c2:bb:b6:4d:d5:32:af:1d:8c:1d:02:
2e:aa:aa:2a:fa:ae:ab:85:8b:68:d6:a6:6f:68:bb:1e:7b:ee:
a1:b3:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:20:00 2025 by rpki-client