Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: Abmm6cv8RV5EZYOxGnrCySVJ6K+JT5dXzoUJf2N8n7s=
Subject key identifier: DA:E2:D5:E7:02:6A:FB:C7:CF:E9:5F:41:A7:D4:BF:9F:EF:BD:9F:F4
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 0198D4E0150434A7CBCE3DF5D9B3AD8B3BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0F61
Signing time: Sat 23 Aug 2025 03:01:51 +0000
Manifest this update: Sat 23 Aug 2025 03:01:51 +0000
Manifest next update: Sun 24 Aug 2025 03:01:51 +0000
Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: WY26JZNLPO0bQokgzMEyOZ4hpe0T3JbZKiWqj0rtgUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:15:04:34:a7:cb:ce:3d:f5:d9:b3:ad:8b:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Aug 23 03:01:51 2025 GMT
Not After : Aug 24 03:01:51 2025 GMT
Subject: CN=dae2d5e7026afbc7cfe95f41a7d4bf9fefbd9ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:51:27:ff:a0:96:27:fe:7e:ac:a3:09:d8:
3e:22:53:aa:8f:75:55:90:00:de:96:ff:b3:2e:2c:
fa:db:7d:4e:7d:4f:cc:4e:b7:77:a8:a2:07:f7:46:
d4:44:c3:c3:fc:48:ff:ad:6d:86:06:e2:42:bc:97:
1a:29:a9:ea:40:06:e7:e0:e5:e9:bb:0d:71:ce:52:
3f:5e:3d:b8:66:82:c9:6e:f3:fe:07:d2:4f:db:15:
bf:a0:57:3f:a6:ab:8b:91:43:4c:17:04:4c:b2:a2:
a7:98:2c:c3:7b:29:ca:d0:7e:f7:b3:bf:3c:83:d2:
0e:5a:21:e8:b3:a6:cf:fc:b6:08:7a:67:7f:a0:18:
24:d2:6e:ad:c7:9c:f8:ba:cb:d9:a3:db:6e:54:a8:
a7:8c:51:c1:02:e5:20:d2:00:91:ee:35:bb:cc:4f:
b2:6f:f7:09:c7:ab:9b:3c:35:92:ec:3f:11:5a:b8:
3b:f9:14:2d:eb:1e:4e:e6:39:1a:56:a9:f1:19:15:
1a:63:a1:88:ae:f0:20:30:82:0c:70:93:85:c8:fe:
17:af:e5:4d:43:6e:0a:a6:1f:9d:d9:4c:64:95:ab:
45:c6:62:73:46:82:c5:2e:82:bf:bc:3c:6c:d3:f7:
68:27:b2:5c:a7:42:23:98:8b:98:67:bb:16:75:d7:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:D5:E7:02:6A:FB:C7:CF:E9:5F:41:A7:D4:BF:9F:EF:BD:9F:F4
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:5b:ad:ea:c1:30:00:4a:2b:33:27:28:b3:48:59:43:09:
98:6c:ee:3a:1b:44:d7:b4:5a:bd:b7:f9:66:fd:b1:ca:c1:d3:
0a:e7:c1:c4:e8:80:a9:52:c4:f3:58:53:bd:f9:42:42:d5:af:
da:31:ba:67:8b:ab:b4:c7:a3:80:2f:ce:c7:58:e5:66:4c:b0:
a3:33:fc:b9:2a:db:65:f2:7e:ca:2d:e6:e9:d2:de:b0:b5:20:
68:21:c0:4c:06:e1:1a:05:40:a8:a4:f5:eb:ec:41:ef:61:c7:
93:1f:de:45:29:51:2e:75:a1:ea:a2:5d:e5:39:47:0a:cb:6c:
5c:90:98:c5:29:b0:b6:70:28:fd:78:6e:77:69:7a:26:79:d9:
43:9d:ed:ba:11:51:f3:ee:f9:c3:77:1f:76:28:52:75:c3:7c:
f1:66:cd:a8:b0:25:91:5c:c5:56:6d:b8:b0:27:31:fc:6f:f3:
0a:0a:37:38:8f:c2:66:e4:19:72:d8:b8:79:ac:6c:52:1c:9f:
4d:b3:50:38:8a:5c:a7:1c:5e:3d:ff:8b:52:1e:73:94:e0:8d:
f7:d8:a9:64:b6:03:e3:33:01:f6:b4:99:67:ef:9e:a1:cd:16:
25:35:bf:c1:e7:7f:a5:e4:1d:b2:96:2d:80:9f:0f:7d:b2:5b:
75:48:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:45 2025 by rpki-client