Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: Y6wlEdiNAQvLTuA1VAtzRTt+2AbOzwqX87A4ynsiCH4=
Subject key identifier: CC:67:54:42:02:D1:DC:E2:A1:8B:70:5D:18:8A:C6:0E:58:0F:53:10
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 0198D54E8780D68CBE0C3B19372B61C80FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0CFD
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: wdHeqyG6rKZE34tgqyESEDj+PuHEHACGKDZa2xY0M5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:80:d6:8c:be:0c:3b:19:37:2b:61:c8:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=cc67544202d1dce2a18b705d188ac60e580f5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:00:b8:35:93:b4:cc:d3:7f:5b:e3:63:af:
b8:b4:81:4f:56:e8:7a:8c:ce:cb:2e:16:f1:10:0e:
93:67:4c:6b:63:f3:e0:ea:3f:70:ff:61:3a:8b:a9:
90:1f:a5:04:01:2d:03:e3:c1:3d:c2:09:53:36:1b:
7e:24:7f:01:72:20:f3:89:68:a8:86:f9:88:4f:df:
bb:00:0d:54:6e:d8:9c:ab:c2:5b:93:77:fd:e6:68:
65:8d:88:f7:11:0c:01:13:ca:63:1e:0f:77:b5:5c:
1c:5a:c6:b6:7b:8f:e6:51:5e:b8:c2:1e:36:93:c6:
f0:27:90:cc:0c:f1:0e:39:4c:e0:25:d6:b0:3f:6d:
6d:80:4a:58:2b:ce:53:99:e3:d0:19:10:1a:40:99:
ff:72:6b:3a:b5:13:b2:1f:d3:a0:37:d6:b2:d0:e2:
c5:ac:40:6d:15:e6:c8:eb:e6:fd:5a:ee:e4:c0:08:
3f:e2:57:9e:f5:0b:83:83:e4:4b:9c:5d:56:82:68:
8c:b6:d7:02:69:69:bb:fc:07:06:d1:cf:b9:4c:38:
ca:21:53:16:66:4a:f6:fd:c6:18:ac:31:6b:0e:ba:
ed:76:08:6d:27:6c:2a:a1:e9:71:c5:dc:81:ec:b2:
eb:71:37:3f:fa:70:23:20:92:8c:c7:83:e4:db:f6:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:67:54:42:02:D1:DC:E2:A1:8B:70:5D:18:8A:C6:0E:58:0F:53:10
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:0c:9a:c6:f9:22:7b:2a:39:ca:e1:fa:a4:9c:d3:bc:b1:
97:97:6e:d0:be:ff:26:05:a5:df:f2:62:85:1b:4e:b8:35:44:
b6:7a:b5:c4:0c:33:16:fc:f2:70:08:3b:af:62:fb:c1:06:ce:
96:ce:de:c2:a2:6f:ca:e2:44:eb:0d:d3:30:fb:f1:a9:7b:e8:
a0:39:2c:4c:31:1d:fa:5f:8d:99:f2:51:62:c7:6e:77:8d:8c:
b8:8f:b9:55:de:54:2a:69:09:91:96:f4:18:f5:22:5a:9f:db:
62:48:b6:34:db:7f:1e:81:14:aa:23:d7:19:eb:1d:26:52:f9:
50:ae:8d:95:e9:e6:79:96:56:70:f6:96:c5:fc:62:61:15:73:
87:ee:d9:59:2f:65:52:6c:20:f5:77:51:ff:c2:3f:04:fc:a2:
03:ae:68:44:2d:0e:8f:f9:ab:4c:96:02:fa:43:73:5a:09:79:
ee:df:0c:0f:09:44:ff:6a:94:2b:e8:db:a1:86:ac:4d:49:aa:
2c:a0:67:91:fb:da:1c:a3:d5:ec:aa:9d:d0:b2:bc:35:56:b5:
05:1a:e2:ca:7e:8e:8d:4e:5c:9b:e3:7c:93:12:cc:ad:79:eb:
1e:7e:f6:5f:5f:32:9b:ff:8c:f2:89:53:15:b5:e3:ea:a8:4d:
2c:fe:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:27 2025 by rpki-client