Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: /Tx9qb2dl8miL5wT525Ncon/4PZGtb0Dv3sjAAZlQ3E=
Subject key identifier: 45:F0:D6:51:7F:8B:C2:47:F2:88:36:0E:BE:8C:0F:F0:5C:16:EE:A6
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 0198D472A0E0F0C1772E00A22226E790754F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1459
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: W0eYtxF47sUzH1jTrEptd+0xVc+77a9ITZDTlp7p2aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a0:e0:f0:c1:77:2e:00:a2:22:26:e7:90:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=45f0d6517f8bc247f288360ebe8c0ff05c16eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:47:2a:5d:b5:3a:68:ba:3c:09:f2:3d:ba:
7a:ec:47:37:81:b9:cd:2b:92:bd:96:32:61:b5:8a:
96:38:76:91:f5:23:1e:44:81:92:68:6d:bf:a7:c2:
85:b3:05:ef:aa:bb:ea:4f:2b:33:a3:3a:f0:88:3d:
c2:50:53:a7:50:c7:cb:2d:c3:e2:e8:ef:c2:a5:b1:
a7:7f:ea:72:f0:76:35:7e:ac:9d:f3:ae:b4:75:66:
55:9a:5d:70:4b:23:f5:bf:36:f7:13:5d:6e:d9:69:
47:9c:80:e5:d6:ee:16:92:29:1c:f4:f6:0b:53:a9:
f4:4f:9c:9c:db:a5:61:c8:cf:bd:23:89:29:5e:26:
78:56:74:01:71:f0:fc:77:e5:50:95:18:77:b8:5e:
9e:ac:2e:5b:ee:f6:91:58:3f:c5:e4:17:2b:62:7e:
bc:65:ca:b6:bb:95:d4:ec:4d:e1:aa:f8:b7:80:87:
e0:47:3e:5e:2d:7e:c0:19:41:36:dd:4a:6e:73:8d:
c4:03:62:14:b5:e1:c8:ca:f4:bf:4b:ab:c2:74:66:
ca:ab:e0:2e:87:8b:1a:61:8a:0f:de:0a:ea:f3:57:
bb:21:3d:f4:38:58:aa:27:b0:bb:06:bb:ef:fb:bb:
60:0e:94:84:5f:30:e9:d5:24:c1:81:e2:29:ee:0a:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:D6:51:7F:8B:C2:47:F2:88:36:0E:BE:8C:0F:F0:5C:16:EE:A6
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:92:9b:7f:b5:0f:0f:3f:b5:17:4b:1b:d1:ca:b7:5b:69:
52:e7:3c:80:d5:b2:2d:d2:71:49:db:f9:3a:6f:2e:ba:3a:f6:
39:b2:a3:16:37:a2:81:4b:b8:ae:02:72:3c:5b:4d:09:d7:ff:
da:ab:50:32:bf:5b:ab:63:cc:15:a0:19:76:7b:be:bf:a0:e5:
12:0e:37:4f:06:d4:91:5f:53:ba:08:2b:10:3c:83:b6:5d:a0:
c3:8c:17:d6:d4:02:47:cc:04:24:f1:8d:90:de:48:78:2e:95:
ef:6a:63:2e:eb:a7:79:58:63:02:81:2b:4a:5f:f1:b6:13:77:
4e:29:cc:3c:13:fd:71:96:d7:93:6a:67:a9:1f:ba:46:8e:9e:
91:25:39:a6:f3:52:06:07:60:ad:8e:d0:c4:c6:f6:61:1b:06:
71:68:50:df:66:ca:2f:dd:ba:b0:53:05:f8:1a:b8:87:9a:3e:
70:28:41:a5:d9:ca:28:1b:9f:7c:0b:fd:53:12:af:32:e2:10:
a5:c1:72:a2:a4:0f:f9:b5:74:5d:a3:31:a0:b1:d3:4f:6e:af:
c4:be:ac:28:a2:90:ce:71:78:62:37:d2:77:3f:28:d8:fd:b9:
89:af:42:46:dd:1f:4c:cf:1a:d5:7c:ce:e8:9a:e0:eb:eb:9a:
90:e3:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:32 2025 by rpki-client