Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: JxRynaiDQz5uxj7kfm7RKFQYfuMVg9gF7/MCjXFsAxg=
Subject key identifier: D2:E7:07:D8:C4:81:23:83:95:A6:E5:37:65:36:CC:8D:46:5C:0F:2C
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019874191D356D17FFDE29F5249CC30DD24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0CF8
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: xsQXXpRDZz8Nctbejtj5YBuqwdKFa6c3mZVhXmAuBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1d:35:6d:17:ff:de:29:f5:24:9c:c3:0d:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=d2e707d8c481238395a6e5376536cc8d465c0f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:8f:2a:98:f7:16:25:3a:ba:e1:4e:0f:01:
ea:cc:b8:bb:52:4b:1d:27:95:03:14:79:5c:e1:56:
62:5f:f2:21:3e:ef:49:ef:c1:6a:06:8d:45:5e:b4:
ef:2e:ac:15:1b:8b:04:60:35:44:bc:bf:56:7e:c4:
c8:ba:00:d0:33:9c:bf:05:53:a7:22:69:2d:ed:0a:
6d:10:83:cf:68:e3:7b:55:07:18:1e:08:d1:81:cd:
42:db:2d:4e:64:77:5e:53:89:70:fd:e6:fc:84:df:
c6:21:40:ff:15:90:2e:1e:a1:17:5e:b0:38:18:69:
50:12:d6:f7:15:2a:a6:a6:95:d3:17:76:87:e5:80:
5f:44:38:20:db:66:11:88:21:50:f9:05:97:7c:f4:
32:79:9f:8a:07:66:bb:62:83:6d:10:cb:bf:1e:38:
eb:68:98:ec:8c:2a:10:72:95:b7:2e:5d:b8:81:54:
95:f2:a3:1a:f8:f9:50:f6:13:14:58:87:63:84:ab:
70:9c:79:01:26:d0:03:37:0e:aa:07:ce:1b:11:14:
df:67:94:1a:89:09:36:01:d5:64:cc:d8:36:b2:72:
27:32:9c:20:34:dd:54:95:d1:85:53:a8:d5:85:1e:
e7:68:27:dd:cf:42:41:8d:92:ee:01:b1:b4:c1:88:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:07:D8:C4:81:23:83:95:A6:E5:37:65:36:CC:8D:46:5C:0F:2C
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:45:85:12:fd:77:9f:54:1c:47:45:ee:94:60:7e:3b:65:07:
0f:8b:a9:d3:44:fa:28:26:be:a4:27:4e:19:85:82:e1:8a:d3:
32:5f:40:f0:91:c3:50:58:6b:ad:b7:28:79:b2:da:d5:db:39:
48:84:b0:d3:7f:d9:89:73:a3:9d:9c:cc:72:35:33:5f:97:e7:
90:15:ef:b0:3a:13:60:a2:cc:dd:1b:56:d0:ce:8a:64:79:9b:
af:fc:76:35:bc:d7:a0:91:e5:c8:79:8b:47:0c:dd:d4:f1:ba:
c2:5d:d4:33:c3:b4:e6:09:d8:59:0f:28:3c:98:1e:5c:be:55:
54:52:cd:15:df:09:94:3e:7f:0d:e4:be:2c:73:31:1f:3f:d7:
25:06:fd:20:40:91:57:47:5b:af:3b:b1:11:4b:38:0a:df:30:
07:d4:86:f7:cd:7b:8c:db:8b:3b:7c:b3:ab:dd:e7:3d:82:b8:
9e:b1:6b:2e:e8:36:b3:9d:59:81:fe:47:8c:51:37:e9:db:57:
5a:ea:a9:15:e4:f3:2b:3f:25:21:2c:73:4c:95:e6:9f:3e:e0:
f0:4c:48:f3:85:f6:9e:62:9c:97:8d:51:1c:d3:49:f1:fd:c2:
34:3c:88:2b:ca:48:07:1f:18:f8:51:d9:75:6f:c3:c5:f6:4e:
3c:43:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:21 2025 by rpki-client