Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: 8hTxK1pxbSk6drLnXwAm3EgACnskI3NHpO0hW6pAwbw=
Subject key identifier: B2:84:D4:BB:C6:57:2E:BB:38:F3:17:53:A5:0F:86:AB:89:5D:87:4E
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 0198D6CD4A17C8F4900869CF3D47A0D499CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0CA5
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: Gf4EfyHXAiWh4NHyN49IeHbt6IkWseC/cLhzfFUCJ9g=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4a:17:c8:f4:90:08:69:cf:3d:47:a0:d4:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=b284d4bbc6572ebb38f31753a50f86ab895d874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:3d:aa:d9:84:34:f7:42:de:30:2b:a2:3d:
dc:cb:66:36:df:e6:30:c1:8f:f6:3a:96:98:80:35:
15:93:17:e5:0c:b4:4b:71:2b:52:07:7e:c7:f5:f6:
34:05:72:71:d1:a8:51:54:ae:0d:10:29:16:96:71:
77:c0:56:b9:19:0f:67:d3:f1:94:06:5a:17:03:40:
1a:e8:a7:dc:da:b1:ee:84:83:43:b4:a2:d0:7e:0e:
9f:18:9b:13:e5:87:44:2c:bc:0a:ae:8d:3e:00:08:
ac:0e:d0:68:b2:3c:f2:b0:d5:2f:5f:5c:9c:73:b4:
74:ab:ec:12:3b:08:69:63:b4:f2:a3:bc:39:95:af:
d0:10:dd:c2:cb:b6:d5:7b:a1:09:16:a8:21:fc:0c:
b0:66:de:04:f9:45:b5:d2:11:6c:a6:7a:e3:a3:53:
71:a8:5c:f5:e6:61:8b:b2:01:29:dd:ef:b5:01:4f:
8b:68:79:5a:2a:54:86:c3:d8:08:c5:a4:74:b5:ec:
ac:08:3b:87:63:a3:f9:1c:02:f9:5b:52:ac:33:89:
07:34:d5:34:15:aa:b9:6e:c2:bc:e6:92:bc:f7:7f:
b6:11:fe:0e:e7:93:31:7d:19:ef:36:71:5c:05:e1:
5b:b0:fc:da:00:a4:29:97:ad:0d:e8:e6:24:42:a8:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:D4:BB:C6:57:2E:BB:38:F3:17:53:A5:0F:86:AB:89:5D:87:4E
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c4:12:e5:cc:11:db:44:c5:98:ca:e6:df:79:e7:f7:05:d4:
82:5e:5f:b3:aa:27:21:3c:b6:4b:4e:bf:51:41:00:58:0b:84:
6e:22:95:9f:51:cf:90:ee:b6:95:fe:c1:9a:45:aa:6b:c0:67:
0d:a4:87:a9:5a:2b:8b:02:3f:e6:a6:e1:8a:83:8f:6f:07:fc:
e6:9d:b8:df:0f:53:dc:46:1e:d0:15:a9:29:14:3a:dd:4e:08:
cf:7d:54:a2:42:be:fd:d3:8c:0e:db:6b:60:fd:ca:99:b8:32:
ca:c9:aa:72:e0:0a:45:bc:57:95:2f:d7:68:78:ec:f8:92:67:
75:cc:04:12:45:e9:40:18:08:39:63:f2:81:16:0c:2a:34:33:
7d:db:9d:c5:f7:87:be:05:c7:54:65:fc:8a:ff:7f:7d:72:f7:
fb:3a:17:31:d3:3b:d6:8d:67:32:27:58:ee:c2:9c:b5:38:8f:
a2:b4:03:85:1c:1a:b5:91:52:1d:2b:f3:28:2f:71:8f:50:e2:
b9:84:84:bc:d9:be:5b:03:71:ea:94:63:e1:3f:fc:29:df:d3:
22:0f:5b:99:65:d9:05:e1:2b:2e:94:d2:37:8a:6f:3c:6f:29:
98:2c:4a:c4:be:b6:0a:58:0a:a5:34:c4:d5:01:f7:36:04:17:
78:e1:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:44 2025 by rpki-client