Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: sTpC+NcUdikUZ/BZIJtUFEn3q/Yjn1z3HC64hKCPTTc=
Subject key identifier: 19:3E:94:1B:96:0F:0D:45:D6:1F:3D:7C:A3:24:D1:B8:32:1A:44:89
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0198D5164106051450B59E37CB229B656E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0DA6
Signing time: Sat 23 Aug 2025 04:01:02 +0000
Manifest this update: Sat 23 Aug 2025 04:01:02 +0000
Manifest next update: Sun 24 Aug 2025 04:01:02 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: SMhH/PosSDlMW1zHFv3R4WI/KsO3ocP+yee4ssQ7j1w=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:41:06:05:14:50:b5:9e:37:cb:22:9b:65:6e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Aug 23 04:01:02 2025 GMT
Not After : Aug 24 04:01:02 2025 GMT
Subject: CN=193e941b960f0d45d61f3d7ca324d1b8321a4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:8e:6d:ca:98:b6:70:39:7a:e9:f9:46:6b:
64:bc:70:9b:83:dc:3c:a0:54:3d:49:0a:37:b9:05:
f9:97:c3:11:fd:88:ff:6d:7b:86:9c:8e:7d:a0:63:
cb:64:4b:af:21:4e:02:7f:ad:1d:14:c7:53:c6:54:
7b:15:02:eb:86:be:e7:c3:ed:d5:e7:9f:48:8d:e9:
ce:1a:7d:b2:71:d3:40:7c:23:eb:37:9c:7a:0c:2e:
f6:de:92:4c:16:f5:20:f3:ba:af:3f:aa:4f:8d:94:
5e:f9:b2:51:f4:54:2a:72:9c:bc:df:08:9f:5b:c5:
7b:ad:40:72:2f:6e:b4:35:d1:06:b1:68:76:e3:57:
f8:21:d8:04:cf:8c:22:56:b2:5e:3b:09:b4:70:c9:
f9:3f:d2:a3:2a:c9:84:0d:33:b4:15:10:eb:fa:b3:
26:ff:c2:2e:c1:a2:9e:89:1f:b5:68:ab:3b:56:32:
32:64:3c:59:6b:c9:a8:10:c6:2a:e8:30:46:68:dd:
01:94:ff:90:10:64:5e:1b:ad:0e:52:e3:91:6c:1b:
80:0c:48:3b:3a:2d:8a:ce:61:3c:6c:af:74:ac:3f:
53:d1:62:2f:4c:ad:f9:76:91:db:d1:36:7f:36:ff:
a6:79:87:6b:29:07:b6:82:5f:bf:51:b9:24:46:68:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:94:1B:96:0F:0D:45:D6:1F:3D:7C:A3:24:D1:B8:32:1A:44:89
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:32:ce:7e:59:b8:5c:f7:62:7d:6c:9f:0b:1d:2a:d4:3a:c2:
26:44:d0:ed:bf:6a:01:f3:29:39:41:8a:8a:ab:f7:a3:28:64:
50:31:e7:5a:99:9e:71:65:48:e4:75:56:37:a0:66:bf:48:6c:
d5:81:c6:1b:33:b1:d7:e2:60:8f:86:0d:ab:82:47:eb:38:7c:
b2:73:95:37:ee:58:73:59:4d:c5:75:bd:2e:dc:a2:75:ee:c9:
61:7a:62:42:98:ef:3b:4b:0f:86:28:5c:ab:c5:4a:02:b8:66:
3c:b2:4b:99:8c:29:35:0e:98:47:f5:b9:4b:30:b2:0e:07:0c:
c2:2c:0a:06:05:b5:04:86:22:bc:08:9f:5f:cd:e3:ef:bb:77:
82:35:00:ea:c2:f1:77:65:e8:82:40:4c:ab:fd:d4:40:e0:15:
f8:f1:2e:0e:78:d2:23:91:df:c4:94:7b:17:04:39:d8:33:76:
1d:b4:9d:b6:b2:bd:5c:b0:42:53:4a:2b:d7:12:30:fc:c8:39:
46:7c:af:29:df:54:bd:80:a3:d6:e0:7d:f2:54:be:3c:64:be:
48:1f:2f:f4:cd:36:3e:7a:be:39:61:5f:86:df:d2:71:89:6b:
82:ec:c8:45:df:78:b5:49:17:2e:6f:34:5a:0c:59:fc:04:c8:
cf:33:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:09 2025 by rpki-client