Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: QjG3X0jU4Wa9TsfF48bezTf4FScPV2ZBDtfG9c8/uNU=
Subject key identifier: C4:20:75:82:9E:1A:10:91:13:D7:01:EB:B9:77:40:9F:97:95:10:B8
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 01987E2ED00DF3F9570D09B0C550B9753D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 07:00:53 +0000
Manifest this update: Wed 06 Aug 2025 07:00:53 +0000
Manifest next update: Thu 07 Aug 2025 07:00:53 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: em2bkg6ItFlb0IdvXKWAxY3PjHP2TiUN5pN+j9VXDrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d0:0d:f3:f9:57:0d:09:b0:c5:50:b9:75:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Aug 6 07:00:53 2025 GMT
Not After : Aug 7 07:00:53 2025 GMT
Subject: CN=c42075829e1a109113d701ebb977409f979510b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:0a:d4:b8:7e:73:03:82:7f:f6:6f:46:f7:
fb:2c:4b:0a:d9:ee:39:22:10:42:e9:f8:a7:d8:c9:
60:b0:20:5b:d4:67:99:c2:48:3f:e9:02:c9:5f:69:
77:3c:fa:71:09:d2:dc:d3:53:4f:0b:ea:7b:66:21:
d7:a9:07:ce:15:89:33:44:28:aa:84:de:8f:83:4d:
e0:50:f9:4e:5f:81:d1:bf:ae:05:7d:1f:d1:6e:1a:
c4:ee:f8:8f:0e:04:7d:7f:dc:d7:05:eb:d0:24:35:
a9:82:41:89:64:4c:d5:7b:9e:1f:81:2c:9d:73:66:
99:4b:0d:75:67:fc:b5:28:f3:a6:5d:fb:63:93:46:
c6:49:dd:ad:37:6e:25:0e:e8:a9:de:ac:2e:8e:f4:
ef:97:25:d7:12:89:0e:2a:4c:f9:0f:40:ac:2d:27:
55:34:77:c0:93:2e:fc:92:a4:31:95:a9:0c:2f:b6:
fe:24:1d:ba:d1:48:1e:ef:fa:91:a5:46:30:a3:4b:
d2:ee:10:d8:77:24:a7:93:0b:e5:30:ac:ef:2f:20:
38:a2:a2:69:e5:b0:41:4e:20:89:d2:06:88:0b:cf:
79:b9:a2:73:d2:77:10:78:83:db:dd:fd:0f:31:4b:
22:5e:b5:74:8b:88:b4:06:23:e3:c9:16:7e:f2:cb:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:75:82:9E:1A:10:91:13:D7:01:EB:B9:77:40:9F:97:95:10:B8
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ee:95:ec:10:9c:c7:8c:8e:f3:a2:a3:18:01:f5:f9:9c:0a:
ed:c3:18:9d:fb:f8:95:14:c3:d5:cf:35:75:a3:cd:28:4c:21:
f2:12:6a:0b:5d:86:09:89:e3:91:20:09:ca:83:7c:89:69:c8:
86:68:a8:30:40:0e:8a:41:2d:72:83:88:4a:f8:56:98:a5:97:
b9:e1:69:6b:66:ac:8e:cf:37:35:ba:f4:90:28:41:14:53:7e:
52:ac:87:33:77:06:62:f7:40:77:ce:1c:14:c1:09:a3:f4:87:
25:c5:35:f6:73:60:24:58:81:6e:c9:10:43:34:39:f5:26:d8:
e8:fa:57:45:79:d3:8f:79:1e:ef:59:21:c8:8d:c5:1e:b3:97:
08:ea:ab:f1:af:95:ed:e3:af:db:c0:33:bb:c7:02:71:73:10:
dd:58:3f:ee:a6:da:21:ba:00:c4:8b:23:7f:a8:23:01:14:c9:
d7:b4:7b:ad:b3:65:5a:05:a0:91:01:57:bc:86:ba:a2:c6:aa:
e0:2d:bb:d8:89:91:cb:2c:9d:05:6d:46:e2:ea:db:c6:db:d4:
e8:fd:51:d0:61:56:ce:24:d9:bd:66:3b:18:c1:ac:84:90:d8:
80:ea:cd:42:bc:18:69:c1:0b:9d:d1:76:58:aa:e7:21:12:b1:
04:9f:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:33 2025 by rpki-client