Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: VviqiLH9K3vay1Mf3DNvVOAZBRpdK2lUpRf3MmTFksc=
Subject key identifier: C8:D9:82:10:FD:20:29:94:86:EC:7B:4C:29:A5:49:78:90:4D:2B:0F
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 0198D6601118DB3DEAE7BD66A38FAA700966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0AB6
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: gHEYasoC7pbYenLtxiQzGoPkuvPqEbvjwCWEK3PMA8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:11:18:db:3d:ea:e7:bd:66:a3:8f:aa:70:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=c8d98210fd20299486ec7b4c29a54978904d2b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:df:3b:1e:cf:42:31:35:30:6d:65:d8:e2:
8c:41:83:ac:22:97:df:e9:66:a3:51:a0:c6:fa:a4:
66:3c:3a:4f:33:3c:e0:51:5b:14:f8:bb:50:5d:1c:
66:81:f1:9d:06:c2:fa:09:06:3d:46:43:2f:5d:c5:
47:e5:b3:68:46:91:ae:0b:2a:6b:0f:30:9e:15:5b:
c3:77:2d:f4:8e:6d:37:19:ca:98:cb:c5:cb:31:33:
24:68:11:7c:0d:9b:4b:0e:d3:18:9f:b4:e2:bd:1f:
ba:51:5a:25:f9:85:8b:2c:74:2b:80:de:15:c2:18:
2d:95:bf:58:15:e1:53:71:73:c4:70:dc:11:4d:60:
b0:03:7d:fa:7e:e3:4f:d9:6b:89:3c:08:41:e6:9f:
1c:5c:bd:ac:02:70:7a:58:bf:d8:d4:c7:b0:2f:6e:
b3:de:a1:1a:6c:bd:4b:1e:b3:3e:07:2b:27:f0:5d:
8d:81:24:99:19:4a:dc:37:ca:7c:3e:1c:32:bf:cb:
da:91:9b:9f:a3:45:f7:1a:db:35:f7:72:62:cc:8e:
a4:90:54:a5:41:b1:2a:b5:0b:c4:35:3a:d1:0d:68:
ff:f9:3f:85:ba:77:45:21:b3:f2:2c:62:26:b5:7a:
79:fc:96:2f:f2:13:9d:f8:15:ce:91:78:4f:be:ec:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:82:10:FD:20:29:94:86:EC:7B:4C:29:A5:49:78:90:4D:2B:0F
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:cb:3b:91:99:eb:4a:b9:7a:8e:21:8c:2b:f8:2b:ee:f5:
21:dc:60:b1:4a:f6:3b:8c:8c:d0:19:ae:ab:27:ec:3e:75:6b:
9b:dd:e4:e4:2d:d6:e9:d7:d2:d4:f0:a5:e2:63:d8:c8:ba:c7:
a4:24:e2:6b:b2:7b:86:01:fd:e4:31:d2:98:d7:96:4d:bb:a3:
55:bf:5b:d4:71:fd:de:a4:85:05:7f:7f:05:43:bf:1e:a4:2c:
ad:d1:ad:8f:c1:74:ee:76:53:80:67:85:19:40:05:5c:e7:1e:
4f:86:b6:08:42:3d:7d:00:8e:cd:3d:f4:8b:af:63:c5:74:5a:
83:f7:86:52:ba:65:b0:10:da:ae:5c:cf:92:45:bc:8b:73:5e:
02:cd:4a:ea:57:b9:75:0a:2c:f1:b5:32:13:c2:ff:cd:65:fa:
16:ad:94:ca:6d:a8:28:4f:3e:d7:04:4d:b4:c9:05:31:32:7f:
15:a8:6b:18:6f:d1:ab:1a:e5:a4:a3:e2:3e:3b:b5:ea:d9:63:
05:51:8d:a3:3b:1a:39:16:89:43:70:fb:a5:9d:b7:ab:f0:0e:
81:d5:c4:f6:2d:03:08:92:5c:9e:1c:0b:90:bd:a2:cf:c0:7d:
a4:24:1a:a8:30:8f:c0:7e:bb:eb:b2:de:92:56:d0:ca:df:0d:
fd:43:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:54 2025 by rpki-client