Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: sRHeS3d7wKgMeiYR81spHONe5SLC8xiEEx8bbPyOTog=
Subject key identifier: 08:1B:0A:8A:2C:E2:53:A1:29:C0:18:E4:2D:96:94:D4:70:44:75:92
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 01988E46C9F519D944C346E333FBC6E47FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 20
Signing time: Sat 09 Aug 2025 10:01:00 +0000
Manifest this update: Sat 09 Aug 2025 10:01:00 +0000
Manifest next update: Sun 10 Aug 2025 10:01:00 +0000
Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: vaiKdFCoIofqeAsWU/qr8do6PYXCd5+2RA+PERxN0Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:c9:f5:19:d9:44:c3:46:e3:33:fb:c6:e4:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Aug 9 10:01:00 2025 GMT
Not After : Aug 10 10:01:00 2025 GMT
Subject: CN=081b0a8a2ce253a129c018e42d9694d470447592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:89:c9:ff:a9:ba:16:3c:48:c3:58:89:63:
19:fc:5a:93:c8:fe:85:29:c0:3a:43:2a:4b:fc:fc:
17:88:2a:b7:47:c5:51:87:76:29:1f:32:40:b1:3f:
2c:41:ad:47:fe:a7:05:dc:94:5c:c5:a3:b5:42:02:
43:70:03:bc:20:69:ab:61:14:30:4b:89:b7:3d:ed:
b3:ea:4e:a6:77:e4:a9:0d:8c:6a:87:54:8e:95:b3:
ad:0b:e4:fd:72:1e:52:af:69:92:93:b1:01:a4:14:
fe:29:11:a5:2b:d7:9b:b7:54:ff:3a:f9:d8:a2:e6:
07:78:12:ac:d2:b9:e5:f6:78:b9:c9:b1:9f:09:40:
55:99:09:6c:51:88:c1:2c:d2:e6:0b:43:22:ba:17:
28:19:b7:cc:ee:26:c1:49:39:e8:8f:8f:de:a4:24:
c4:09:de:ba:d4:c6:95:e2:51:78:2f:a9:a2:a8:e5:
c0:d0:12:f7:18:f5:cd:dd:35:7f:57:f0:e2:bd:43:
e7:b5:1f:be:fc:c9:21:84:46:76:67:15:5d:16:b3:
bc:36:43:da:18:56:97:ff:04:e5:24:0e:be:30:cd:
36:d5:3a:88:75:61:9d:8a:4b:8f:7c:57:74:95:6d:
6d:63:7d:05:9a:a1:e2:4a:b4:70:e2:cf:5a:fc:14:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:0A:8A:2C:E2:53:A1:29:C0:18:E4:2D:96:94:D4:70:44:75:92
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b7:fd:ed:1a:18:37:79:36:90:ea:bb:5a:20:a7:30:a5:ca:
e7:12:06:4e:c7:c4:6d:34:79:16:cf:3a:da:44:7f:ea:29:83:
cc:e5:66:01:68:e4:5c:48:83:c8:9d:bd:69:56:c6:c6:43:ac:
19:3d:20:ee:dd:82:19:c3:31:0a:87:51:e3:12:ed:4f:07:dc:
95:ae:6f:88:4e:b0:de:10:9b:23:dd:4a:b9:c5:2c:bd:3a:2e:
f2:01:21:65:af:30:d1:fe:d9:e3:fc:b9:4f:72:32:14:d7:04:
34:ab:59:24:ac:ac:ca:b9:a3:8a:6c:3f:67:86:37:0d:55:31:
3e:d5:23:25:15:ef:28:44:2d:0e:14:f3:00:86:03:54:ae:06:
69:22:33:6e:c5:d8:d9:29:26:c6:5e:b7:b7:79:05:52:7e:f6:
31:00:17:5e:38:2a:25:20:e6:93:3b:8c:31:a4:b2:ff:93:06:
22:4e:25:43:b0:45:80:08:be:e6:f8:60:c4:73:fd:dd:73:1a:
bb:1d:33:77:94:c0:bc:88:02:43:a7:75:56:1d:6b:fb:29:7e:
61:db:ce:b9:23:21:20:a6:e9:21:c5:ac:4b:c4:9a:7d:cb:c5:
c6:60:2d:a2:0d:1e:d6:58:5f:95:cf:e2:b9:2f:58:83:38:b1:
26:4d:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:29 2025 by rpki-client