Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: YRir1bmZuaZq2QOv+VOVeeltt8Olhb8ewNie3Dp4Pbc=
Subject key identifier: 63:1B:A1:A0:FB:17:AE:18:52:D4:30:94:75:28:49:F6:B1:3E:B9:99
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0198771A8E3883397C9BE44F79180C952718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 22:01:25 +0000
Manifest this update: Mon 04 Aug 2025 22:01:25 +0000
Manifest next update: Tue 05 Aug 2025 22:01:25 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: qbaATIMSn9rvEbW7cEw+81vp6N32WmvfeI6jonVo9EM=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:1a:8e:38:83:39:7c:9b:e4:4f:79:18:0c:95:27:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Aug 4 22:01:25 2025 GMT
Not After : Aug 5 22:01:25 2025 GMT
Subject: CN=631ba1a0fb17ae1852d43094752849f6b13eb999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:dc:34:83:28:04:cd:04:c6:6c:e7:6f:19:
14:29:ef:1e:7e:7e:4a:75:35:1b:a1:4e:7b:af:10:
6c:c4:bd:17:a6:7c:56:30:cf:19:8e:3b:bd:8d:81:
a1:2f:1b:80:d2:f2:11:55:fe:ce:41:18:cc:62:9b:
b2:59:1c:ac:20:dd:eb:fd:d6:79:cc:28:2e:8e:65:
1c:04:49:c8:72:8b:43:d2:54:af:6e:14:81:fa:66:
00:9c:ad:ef:27:3f:85:2f:70:da:8a:f7:8d:ad:2d:
9f:d3:bb:1e:2c:34:ce:df:78:27:0e:d4:3d:14:fd:
c6:6a:a0:ef:dc:8c:57:e6:78:41:07:f3:b5:3f:a5:
db:3b:03:48:09:55:f6:23:6d:1d:2b:7d:b1:07:3f:
ac:e0:a8:1b:5f:cc:56:df:52:53:75:95:15:96:46:
e9:6b:24:d5:8b:f2:e8:13:a0:0a:8e:f2:61:db:c9:
cf:ee:51:75:9a:85:51:0d:d9:9f:ab:fc:c6:65:5b:
32:c5:e3:f6:23:b5:bf:b8:27:58:15:a7:34:9c:9f:
eb:e3:da:98:d0:c6:5c:45:19:93:96:86:e0:28:6f:
cc:90:23:84:ca:30:a9:87:d3:c0:fa:25:44:2e:80:
f8:f3:59:16:a8:e5:c0:f3:76:e3:66:c6:03:63:22:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:A1:A0:FB:17:AE:18:52:D4:30:94:75:28:49:F6:B1:3E:B9:99
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:90:0b:d0:48:14:13:3c:1e:ab:dc:54:91:72:9d:db:2a:dd:
81:2b:31:54:3d:60:b4:cb:66:47:fc:f8:71:94:4c:96:19:08:
74:82:e4:7e:62:86:d1:01:10:d6:56:a7:27:0a:53:d5:8c:50:
5c:27:af:6d:4f:2b:9b:e8:4b:1e:35:f4:fc:85:41:ec:ca:10:
6a:71:15:9b:26:36:cc:31:2c:b2:a1:a3:39:d0:8a:78:e4:d5:
3f:13:38:49:0c:49:0e:da:0e:b9:d1:cb:57:68:a9:b8:3d:af:
28:11:0e:1c:90:30:d2:2d:c2:d1:74:49:b3:56:43:16:65:0b:
1b:38:c2:a4:a4:8b:48:63:f9:9c:d2:0b:bb:74:b6:a8:01:d0:
36:94:ff:e8:cd:9c:77:1c:9c:f4:34:d7:7a:80:d7:24:3e:a5:
56:00:a9:4d:87:2a:3a:a8:e8:7a:ca:74:0f:ac:ea:06:ba:c9:
33:6c:49:60:98:cb:0d:af:dd:8e:34:d8:f4:1f:d8:a7:6e:df:
89:54:f3:c9:1f:fe:fc:a5:61:29:db:72:93:8d:bc:24:d5:78:
9f:5c:57:3b:34:de:4f:b2:cc:68:df:4c:68:0c:7c:fa:21:72:
bf:7e:0f:af:35:6c:68:39:f6:16:27:96:75:7d:21:36:9a:73:
d6:40:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:20 2025 by rpki-client