Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: WC9cL8layZJ3jeK1/SZqUNtpY2g8oHo/UIPZLejG53Q=
Subject key identifier: 10:BA:80:9D:9A:C2:01:EC:D9:59:B1:51:8C:BB:B1:51:78:DB:EB:D3
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0198744FD898C5B072C13BEE026CA03569E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:00:46 +0000
Manifest this update: Mon 04 Aug 2025 09:00:46 +0000
Manifest next update: Tue 05 Aug 2025 09:00:46 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: HBGbB/vwU9OzeZhhr3lhvdYrBoxgSv7DHOd4mEftALo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d8:98:c5:b0:72:c1:3b:ee:02:6c:a0:35:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Aug 4 09:00:46 2025 GMT
Not After : Aug 5 09:00:46 2025 GMT
Subject: CN=10ba809d9ac201ecd959b1518cbbb15178dbebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:2d:35:40:9e:3e:11:e4:8b:f0:dd:ef:8b:
58:d3:48:41:fa:2d:86:00:47:83:86:b9:4c:aa:70:
98:55:7b:fd:b6:80:80:89:92:01:1e:83:04:50:ed:
e0:a5:06:cd:2e:76:ee:4a:56:db:e1:ec:34:68:e0:
83:48:22:82:f7:22:85:c6:0a:9d:e6:73:68:1d:c6:
c3:e9:01:05:a0:52:22:e3:10:5b:88:35:0e:88:d0:
68:aa:45:55:0d:cf:9e:fb:0f:1b:79:74:65:c8:88:
a4:80:ef:72:6d:06:28:23:e4:f0:d0:37:65:f6:b1:
86:67:09:98:3c:f0:ca:8a:08:79:e2:44:00:5c:d0:
35:68:1d:57:37:5b:df:bc:d2:ff:c3:c7:67:07:86:
21:a5:c2:6f:f3:fa:3c:40:77:d4:db:7a:8c:3a:7a:
b0:c5:f5:48:d4:b9:b1:17:e6:28:c8:5d:fb:b1:87:
a2:b7:87:7e:2e:a6:27:21:af:69:ca:b5:8c:e8:61:
ad:cd:e0:68:8f:32:09:0e:ad:36:87:98:35:d7:ba:
e7:79:cd:b0:d5:7a:72:fc:52:ec:e6:e5:4b:01:63:
12:94:2f:68:b2:f3:3f:5d:1a:64:32:bc:42:4e:4d:
b7:a4:ee:62:d9:05:72:6a:6b:90:0e:fa:8b:9e:65:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:80:9D:9A:C2:01:EC:D9:59:B1:51:8C:BB:B1:51:78:DB:EB:D3
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:80:c5:10:70:dc:bb:48:fe:5a:f0:c5:47:42:bd:2b:b9:fa:
95:5b:07:5a:fe:88:73:07:f4:ee:18:82:19:70:ee:c5:58:16:
c2:8b:87:7d:f0:ab:49:bd:7f:01:d3:ae:21:5d:18:ae:07:12:
13:95:d3:66:27:2f:76:f7:25:a4:07:86:8b:cc:4a:9a:a5:fb:
0a:82:7d:f6:8d:c3:04:cb:b3:47:a1:ca:df:62:59:8b:9b:05:
82:a5:c8:65:2c:f2:f8:8a:58:00:dd:4e:da:a0:8a:2e:77:d1:
fb:7e:35:5c:7c:6d:ca:4d:69:eb:98:18:7a:a4:f1:62:fe:da:
60:d9:ef:6e:a5:2f:be:74:8d:80:4b:54:52:b7:41:64:fd:a3:
9c:71:73:fb:9c:bf:73:d6:ff:9f:94:8a:9e:89:8f:6e:15:a6:
26:4f:ca:71:c0:0f:86:09:08:2b:1e:6c:c9:4e:81:18:f0:da:
bd:09:ae:7f:94:27:56:1c:2d:d6:2e:05:ce:77:3f:53:45:a0:
53:e2:18:39:63:0f:f0:cc:43:91:6f:fb:22:af:47:1f:f8:06:
26:69:f5:ec:ca:73:fd:ed:78:a7:4a:94:30:ac:39:9b:29:d4:
51:2a:a3:23:b3:c0:df:96:7d:a8:1e:70:cb:0f:c9:8f:d6:ed:
2a:8e:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:45 2025 by rpki-client