Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: R/DGi5mq2vXwCGEjIEkjoQWNMs11Ohi0GlV1+ATvj3Y=
Subject key identifier: C5:83:1B:79:D9:BA:E3:5E:5F:C4:4A:C9:02:22:EC:F1:62:49:E3:A7
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0198D773527F2647B1397B776475A656E053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 08D8
Signing time: Sat 23 Aug 2025 15:01:55 +0000
Manifest this update: Sat 23 Aug 2025 15:01:55 +0000
Manifest next update: Sun 24 Aug 2025 15:01:55 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: DFcXtWphoCT9ZL+NuObh9f+oYM9yErJhlzblW1A9tKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:52:7f:26:47:b1:39:7b:77:64:75:a6:56:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Aug 23 15:01:55 2025 GMT
Not After : Aug 24 15:01:55 2025 GMT
Subject: CN=c5831b79d9bae35e5fc44ac90222ecf16249e3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:36:28:cd:4d:c6:37:87:a0:1a:79:28:1b:c2:
4a:d2:d4:df:50:4e:89:27:76:b0:5f:91:bd:a8:a9:
2e:6c:6c:3a:84:04:0c:a1:17:4a:f8:ba:7e:d8:ef:
3a:85:28:04:8f:f7:89:94:51:27:3c:3d:78:7e:fb:
d4:ab:cf:3c:dd:26:25:3c:31:49:19:16:fe:26:57:
b5:3d:56:8e:c8:0d:65:37:d5:75:d4:95:27:be:a3:
50:cc:4e:46:03:bc:f3:52:34:98:58:3b:3e:70:37:
33:3a:fd:1e:25:3b:9c:95:f1:2b:e9:f3:75:28:3d:
e1:23:f0:6e:4a:67:a7:8f:97:67:0c:4a:9f:46:17:
b1:5f:28:4a:5b:97:bc:d1:73:23:ea:9c:6c:b2:9e:
ee:0b:7b:80:48:c8:c6:8f:48:d4:bc:87:5b:03:0f:
b5:1c:2e:b6:24:56:b4:a9:c3:c5:55:c0:b7:fc:0d:
3d:53:cb:58:fa:fc:07:cb:b0:e3:22:27:fd:67:b3:
14:7b:a2:85:f6:83:d0:36:70:cc:e1:39:c6:3b:32:
bb:18:3d:39:51:1a:5d:e9:c5:be:ce:61:ba:35:79:
7f:69:ca:24:ce:f8:02:32:6b:cf:2f:c2:8f:06:8e:
d3:33:d2:73:c8:71:d3:9f:9a:67:cd:ee:73:3b:89:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:83:1B:79:D9:BA:E3:5E:5F:C4:4A:C9:02:22:EC:F1:62:49:E3:A7
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c0:c2:01:79:46:c4:64:7a:ce:ec:72:d3:03:2e:97:89:c0:
f5:c8:35:2f:64:57:18:f5:c4:37:25:f8:af:fb:ed:cd:f8:21:
3c:27:49:3c:fa:ef:ff:b0:21:ee:fb:ef:a3:d6:58:a9:94:87:
2b:45:5b:d0:21:a4:74:55:3c:56:9f:9d:bb:d2:82:12:e1:c7:
e1:d2:32:61:97:26:ad:a9:34:28:f6:ea:86:b1:4f:5d:36:c1:
a6:97:4c:7d:e0:f7:18:a9:52:05:81:fd:42:e0:3b:66:3b:f7:
04:92:40:c4:3f:e4:b2:78:19:91:08:13:85:cc:0f:9e:ae:6a:
77:d3:68:1c:9f:d6:de:4b:b7:ae:4e:31:6e:72:24:92:37:49:
79:0e:77:09:2b:a5:a9:58:5c:90:1a:37:97:a3:e8:cd:2b:ba:
30:89:f3:94:36:41:7c:78:01:79:88:a9:99:9f:b6:3a:75:66:
3b:de:e1:8e:0d:19:e6:27:45:f4:ee:9a:1c:c1:d3:ac:db:c3:
fa:6f:f2:b0:aa:dd:17:d0:26:ed:a3:53:15:b1:ae:a2:b3:4d:
3d:4b:9e:91:c2:5c:94:9b:a2:11:c3:b3:90:57:0b:4b:13:15:
0e:42:02:ce:6f:c2:50:04:b8:8a:b1:ee:65:85:8f:c2:1a:b4:
3d:44:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:20 2025 by rpki-client