Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: wU7994ZjBumGVA0Zl72rVNU+MKVnDEFEvD0OtXxLrK4=
Subject key identifier: FB:35:FC:4A:E1:15:9B:13:2B:E3:BA:76:02:9B:5A:29:6C:5D:C2:8F
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019874500ED14A3F197E628F1BC7347E2561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0AF9
Signing time: Mon 04 Aug 2025 09:01:00 +0000
Manifest this update: Mon 04 Aug 2025 09:01:00 +0000
Manifest next update: Tue 05 Aug 2025 09:01:00 +0000
Files and hashes: 1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=)
2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: gfyfQ0CW5vkKwPwlnJPCgYXPvSJlHImUE/YML69c1I0=)
3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=)
4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0e:d1:4a:3f:19:7e:62:8f:1b:c7:34:7e:25:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Aug 4 09:01:00 2025 GMT
Not After : Aug 5 09:01:00 2025 GMT
Subject: CN=fb35fc4ae1159b132be3ba76029b5a296c5dc28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:72:3e:d5:fd:51:39:34:75:e3:55:a1:0c:
59:ea:bb:57:d2:bd:39:c0:f9:19:d7:d1:2e:9e:37:
d7:c7:9b:4f:01:ae:7f:f2:fa:3f:27:1d:fd:73:7e:
14:b0:88:95:7f:16:38:e7:85:64:2c:40:67:c8:0a:
d8:86:6e:6d:8f:f1:70:57:08:c6:d3:da:9b:8d:12:
51:07:52:93:a2:80:80:b6:a7:0f:38:28:f6:fa:2a:
79:e2:77:f4:01:cc:cc:7a:76:af:e2:7e:d3:b6:45:
37:6f:b4:64:0e:f8:a0:6d:10:0e:fe:1a:14:19:8e:
1c:0a:33:11:95:94:95:ef:3e:6d:1c:ba:aa:df:f9:
85:df:45:4a:42:9c:4d:07:a1:80:10:47:1b:85:fd:
a1:4f:b5:e7:42:35:ec:20:42:19:b6:ba:14:1b:1c:
39:cc:cc:d4:ff:b8:56:ac:32:31:4a:64:9e:83:26:
b6:6e:b2:25:20:26:be:93:9c:d3:c8:f5:f1:20:81:
7b:07:70:9c:93:19:52:cc:6d:f0:84:2b:75:33:1f:
39:8d:a7:1b:6e:b7:e1:41:e7:70:ee:82:79:3a:39:
23:ed:90:78:97:7f:a4:f5:dc:90:95:bc:81:c4:0f:
aa:ff:38:68:c3:c3:18:64:35:72:00:e9:88:0d:86:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:FC:4A:E1:15:9B:13:2B:E3:BA:76:02:9B:5A:29:6C:5D:C2:8F
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:4f:3b:ab:7d:2c:63:c1:ec:c6:f5:08:27:6b:2e:16:40:
fa:6d:d0:f9:3e:6b:53:11:1f:26:f4:9f:3c:4d:d1:95:59:81:
01:e5:0c:a5:f9:4e:6f:36:6b:da:57:ee:dd:36:ab:f3:ea:9a:
d3:0c:73:93:c4:c8:34:9b:3b:9b:b0:0a:ef:f7:13:2a:41:bb:
ac:88:49:48:e2:5c:a8:3d:81:a3:79:b6:1c:0f:91:2f:f4:1f:
bd:09:9a:65:08:a6:d8:3b:c7:bc:23:5a:10:81:3a:d2:5f:c2:
17:bb:7c:8e:95:e0:d7:b4:ea:12:0d:8e:0b:91:35:c0:4c:21:
37:63:26:72:80:a3:26:0c:fc:5d:78:76:3e:9e:0c:f3:6e:70:
ee:6d:20:ba:d0:fb:b1:a8:7a:9e:89:a2:63:f6:73:ce:14:d1:
46:b0:ad:0e:53:2c:b9:1e:62:b7:5b:a8:97:9f:89:82:2d:c0:
1d:b8:bf:03:5f:da:34:e7:5b:40:f6:7d:1f:fa:8d:0c:2b:44:
91:69:cc:ef:4f:75:b3:53:be:2f:98:dc:38:60:98:9e:b5:1d:
79:c0:72:90:b0:75:92:3a:d3:f2:d2:28:fe:ac:93:a0:a2:7e:
d8:14:b1:59:0b:0b:20:05:d2:fc:c3:29:dd:3c:b9:21:8b:db:
08:e7:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:30 2025 by rpki-client