Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: 9jhjFuUsMfqwOAt5Jbk6VeJldqIwpabJMPnTok4ntqE=
Subject key identifier: 51:B9:D4:0E:75:E4:75:2E:03:35:0B:04:51:8C:96:41:7E:D2:86:AB
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0198730651983313B96BDC63302AD7A9A1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 05CC
Signing time: Mon 04 Aug 2025 03:00:50 +0000
Manifest this update: Mon 04 Aug 2025 03:00:50 +0000
Manifest next update: Tue 05 Aug 2025 03:00:50 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: yCF5wcpUDr7pJDWQWNpJPnptdOf6DH6KXUc/y6t4oBE=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:51:98:33:13:b9:6b:dc:63:30:2a:d7:a9:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Aug 4 03:00:50 2025 GMT
Not After : Aug 5 03:00:50 2025 GMT
Subject: CN=51b9d40e75e4752e03350b04518c96417ed286ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:c5:de:8b:62:ce:ad:2f:34:c1:f2:a0:38:
77:a7:2a:5e:79:b9:fb:74:a5:c5:30:e6:ed:b6:52:
20:b6:e2:41:ca:29:96:94:99:e8:89:60:19:ca:32:
e0:16:4a:79:c1:fa:12:64:b9:ee:8b:95:0d:d9:9d:
72:72:d9:fc:cb:2f:68:07:7f:a5:1d:a9:3a:11:a2:
8b:ba:ac:78:56:74:be:75:c8:a9:2b:fe:5d:2c:95:
e9:91:08:5f:b6:f5:ad:f5:47:57:35:9a:8f:61:71:
fe:0e:cf:61:b3:3b:34:2b:76:9b:ae:bc:bc:8a:d2:
97:d7:1a:2b:9c:86:16:6e:5a:27:7e:9f:1d:cb:54:
bc:dd:8a:b2:48:82:b4:aa:ab:e5:0d:2e:37:a9:f7:
3f:d0:9a:64:c1:0f:34:36:94:02:3d:8b:aa:a2:14:
44:72:07:7f:dd:12:aa:e3:16:e1:e1:85:93:8a:ae:
f6:95:f5:cc:df:c7:7c:15:01:9d:c8:f7:c6:71:39:
a4:ef:c2:4f:d1:ed:c1:fb:58:63:8b:c0:d9:a1:71:
e7:a5:f3:ae:6f:87:96:d1:f6:2a:8d:f7:d1:d9:6a:
2e:06:42:7d:6c:6d:52:16:cf:b1:68:86:00:51:3e:
57:9d:c6:f7:90:8c:69:7e:da:81:74:01:65:b5:88:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:D4:0E:75:E4:75:2E:03:35:0B:04:51:8C:96:41:7E:D2:86:AB
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:31:8a:50:91:51:25:44:6d:1e:48:a2:9b:f2:61:44:86:
b2:71:0c:f4:76:c3:16:fd:e3:32:02:43:8c:40:23:60:59:12:
98:4e:3c:8d:29:09:90:8d:91:ed:ed:da:96:ae:0e:6f:d8:41:
21:d8:2d:0e:3a:93:18:65:26:9e:da:ac:cc:55:57:aa:bb:77:
c3:f8:6e:1a:7f:2c:e1:65:ce:e8:22:49:99:bf:9d:ac:50:6e:
35:63:0e:90:29:04:84:b6:2b:35:bb:a6:4e:f6:0b:71:63:33:
06:1c:65:a7:ed:c5:31:3d:7e:40:fb:ae:f9:a3:6b:eb:70:ee:
73:cc:37:c9:1c:1d:70:77:82:a2:a3:b9:69:c3:17:f9:d3:50:
23:48:34:df:c6:b6:5e:af:98:84:2c:09:0d:85:76:aa:f8:bb:
f7:f9:b4:c8:80:2f:0d:18:bc:d7:85:6d:c6:89:49:d2:c7:9d:
4b:e9:a8:a0:ef:67:e4:8e:1d:e5:f8:e5:00:2e:5e:70:b4:d1:
10:b9:1a:1b:66:f9:ba:5e:a6:54:ba:c2:75:77:87:c4:f0:c4:
55:66:ef:af:ca:30:42:b5:46:32:8e:a0:5b:99:11:10:d0:8a:
63:32:2e:6b:b5:eb:08:7c:55:9d:b3:94:0d:61:0c:20:3c:4c:
9e:df:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:29 2025 by rpki-client