Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: FNlJVO/USFE1vVtVMpbKztytCwyu+MW2xhmjBRf1F9g=
Subject key identifier: 89:B0:DF:73:EB:ED:51:8B:C8:10:42:3D:47:4F:B6:CA:E0:C8:B2:B9
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 01987D8B022EA299867C6F2A661A657A653B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 04F1
Signing time: Wed 06 Aug 2025 04:01:58 +0000
Manifest this update: Wed 06 Aug 2025 04:01:58 +0000
Manifest next update: Thu 07 Aug 2025 04:01:58 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: 34oag26FIqefy6x3Q3fhHEdD+gJYWGsZ8v42nbu24Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:02:2e:a2:99:86:7c:6f:2a:66:1a:65:7a:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Aug 6 04:01:58 2025 GMT
Not After : Aug 7 04:01:58 2025 GMT
Subject: CN=89b0df73ebed518bc810423d474fb6cae0c8b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:d9:33:a4:89:3a:4e:b4:7a:58:12:96:05:
3d:c7:d5:d3:03:64:6b:e5:e8:d1:bf:7b:91:29:1c:
c0:9b:26:df:f3:14:0e:e5:65:53:20:f9:9f:8d:d5:
de:81:db:fb:0a:6a:7d:6e:f6:44:39:35:91:c9:85:
05:67:bc:ef:ba:d0:e8:d2:12:0a:9c:e8:4d:7c:7f:
f5:1b:50:91:19:fb:c5:f1:1e:69:46:4b:e7:80:99:
ca:0b:48:15:ef:b2:24:4d:91:d7:fe:69:fc:94:b4:
07:4a:95:60:48:ba:55:49:ed:b2:18:03:a3:06:23:
8f:29:8f:87:c3:10:4a:a2:b1:ba:73:64:9d:e9:86:
be:07:98:b4:b3:b2:56:af:c8:b0:b5:53:29:a0:0d:
aa:a0:98:a9:8f:87:e9:a7:94:a5:03:7c:18:e0:7f:
fe:d1:3a:56:06:8c:c6:5e:21:4e:42:84:24:d8:22:
57:1d:04:6c:70:19:90:8b:d7:0b:f6:25:92:8e:e8:
ea:be:59:12:58:c1:f7:38:cd:19:71:c8:db:c5:4f:
b5:2f:99:ac:5b:5e:66:5f:21:e5:a4:3a:c6:00:42:
b3:51:98:ee:73:28:fa:dd:15:c0:71:08:f4:da:e0:
7b:2f:c0:4e:eb:af:8a:51:6c:25:7f:9b:2b:cf:77:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:DF:73:EB:ED:51:8B:C8:10:42:3D:47:4F:B6:CA:E0:C8:B2:B9
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:30:7c:ae:ac:18:9d:1e:21:fa:c9:c9:0d:00:72:d4:60:
54:c9:3e:d4:93:44:1d:10:07:cb:21:71:7f:3a:1f:db:a4:cc:
80:de:10:e0:1c:a2:b4:44:85:b1:16:05:21:80:1a:bc:d0:91:
bb:44:9b:25:6e:bb:e1:59:52:c9:23:76:b4:02:83:1a:a4:07:
bf:4a:ce:c4:54:31:d4:c4:88:91:69:83:5c:af:40:07:bb:27:
17:e8:34:4f:2c:2e:f6:33:2a:68:f3:c3:de:66:1e:bd:18:94:
d6:ec:06:44:51:ac:27:98:87:a8:a3:e1:e5:f0:00:57:e0:e8:
9b:08:87:f7:ed:f5:41:be:a4:09:94:44:8b:c7:ff:c5:9e:45:
ab:51:46:d6:ef:37:09:a0:4c:9f:72:4a:bc:c3:a9:79:c2:9f:
bc:de:98:7e:db:18:27:91:59:d1:6a:13:d4:a8:9a:4a:77:e7:
a4:15:d2:ba:eb:0d:f9:73:41:44:b2:1c:70:76:43:b1:82:84:
76:61:c6:a7:df:4f:a5:5f:0f:d2:25:4c:c1:b5:5f:de:ca:9e:
39:80:a2:84:7b:8f:1e:7b:fb:98:6f:37:a3:3f:86:24:fd:7e:
6c:3c:c9:41:82:a9:bf:30:3c:bf:b9:f1:77:8d:4e:0f:2e:1a:
af:70:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:05:55 2025 by rpki-client