Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: Q6IlqaNprq5CKIoxSAUS6vevYMuc3ccIPb94BtmCfWs=
Subject key identifier: 80:FA:AC:45:70:E4:36:38:D4:C7:DA:DE:65:FE:07:43:4A:C5:A6:E2
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 01989FDEEA5DB5155389191D7508DB81A84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 12BC
Signing time: Tue 12 Aug 2025 20:00:42 +0000
Manifest this update: Tue 12 Aug 2025 20:00:42 +0000
Manifest next update: Wed 13 Aug 2025 20:00:42 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: M6v8uvOx6iTSbpxJrW5PFw9uf1VKublwOKnCfHniroQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:ea:5d:b5:15:53:89:19:1d:75:08:db:81:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Aug 12 20:00:42 2025 GMT
Not After : Aug 13 20:00:42 2025 GMT
Subject: CN=80faac4570e43638d4c7dade65fe07434ac5a6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c9:02:dc:00:1f:f6:0a:38:56:f4:95:0f:8c:
bf:95:e6:6f:3b:bd:b9:0d:0f:82:07:ad:27:ff:63:
9c:7d:1d:79:2c:8a:7a:5a:ba:12:73:6c:6f:44:2d:
ce:de:1d:b3:e6:e7:b5:ed:54:9a:17:0a:b0:64:6a:
04:4f:27:f6:de:84:ab:12:e4:79:10:04:34:06:ec:
26:72:41:46:7a:c2:3e:44:06:d2:79:3b:2b:85:39:
51:b5:53:21:29:6d:b6:49:93:59:46:f0:5d:eb:2b:
be:36:3a:ee:50:67:dc:47:62:70:d4:91:1c:76:36:
dc:79:33:4e:e8:8c:f0:a4:ce:3d:78:75:c5:a3:2a:
2c:1e:a6:84:dc:51:ce:09:e0:3c:31:06:08:12:66:
e1:d2:9b:e3:41:9a:e6:f9:37:74:3f:75:65:5e:75:
57:6a:94:f5:fd:03:f0:d3:73:5d:03:1c:69:dd:ac:
1f:ca:05:6c:0a:d5:8d:d5:53:3b:6c:19:53:96:fa:
2a:11:05:5d:3b:3a:60:05:5e:98:20:4b:e0:41:6d:
db:e9:78:20:64:e1:f8:68:d8:90:f5:3a:ab:9b:69:
bd:f8:b4:b7:68:8c:76:da:a2:95:94:0b:ad:9a:e3:
0c:77:2e:60:ed:d6:f6:09:f1:f5:73:08:a9:f5:2f:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:AC:45:70:E4:36:38:D4:C7:DA:DE:65:FE:07:43:4A:C5:A6:E2
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:91:a4:a1:df:37:5f:a7:4c:8f:9b:94:e7:e6:0b:fa:72:
b1:4e:c0:4e:e8:8e:da:7e:70:82:c0:5b:72:14:c2:db:69:45:
5b:32:e6:e3:e4:ca:31:43:eb:c6:8a:a0:3d:cd:dc:55:65:24:
f5:3a:4c:51:5f:d1:d1:6d:8a:64:ce:88:f0:ea:bc:79:6c:af:
7e:c1:7d:14:f3:00:f0:7d:45:a9:c2:76:cd:8d:4c:a8:c8:b7:
31:8c:9d:9d:c8:91:be:74:e6:9c:53:14:97:40:a5:af:00:f4:
b0:28:2c:b1:27:1c:9e:61:ad:36:a4:45:44:be:e2:8a:f3:dc:
36:fd:2d:cd:9e:1a:47:0a:c8:4f:52:04:19:67:42:01:76:22:
05:d5:5d:22:e7:80:5f:5e:8b:6e:5d:52:d6:da:16:2e:e8:28:
dc:e7:96:00:47:1b:5f:5f:6b:28:82:c6:30:9f:0a:6a:0c:9f:
37:cc:3f:78:5b:f2:2e:b3:67:09:8f:cf:5e:56:dd:f4:1a:ed:
3a:46:01:8d:78:bb:35:9a:11:b0:f3:9a:f9:b7:1c:53:48:11:
ee:63:c3:f3:bf:14:d1:9b:7e:e4:25:63:03:e1:b1:ec:c4:29:
f6:71:c8:90:45:0c:c5:76:47:f6:2c:a8:29:37:f3:af:c3:74:
6a:84:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:13 2025 by rpki-client