Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: +QB47yYiAkkKPZsjb989BginEiaOlMrz/+oVGyWDZtM=
Subject key identifier: 06:9F:92:1E:C5:14:84:59:FE:3D:1F:96:10:EA:E7:80:1E:DB:7D:CF
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 0198D4A81F38BC857F51D553C85EB6BE8FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 05FC
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: +GxfQi1nFmN4EqESUYnX7bhLIM+3d6CHAMs+DPXkS1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:38:bc:85:7f:51:d5:53:c8:5e:b6:be:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=069f921ec5148459fe3d1f9610eae7801edb7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:ce:38:53:f2:89:39:71:e9:ef:0c:1c:43:
fe:4a:c9:2c:06:6d:42:91:b2:d6:eb:df:20:c8:93:
e7:89:ad:c8:d4:58:98:d7:d7:c8:be:16:04:79:06:
f5:3b:61:09:d2:64:1c:f3:d1:80:f7:8d:b1:b4:11:
e2:b0:15:9c:5e:1c:02:10:11:80:f8:df:a2:56:f8:
93:97:34:54:18:39:f9:ff:10:8d:43:43:a9:4a:6c:
6e:14:d8:ad:7b:cf:c8:ef:c0:f7:f1:2d:1a:c0:d9:
6c:d1:97:48:0b:ac:66:b9:b1:e9:89:e4:e2:cb:80:
48:e4:32:62:39:b6:31:14:05:93:f7:11:e0:17:97:
52:4d:1a:f1:09:8f:bb:32:3b:4e:51:6a:39:0c:4c:
73:06:82:43:81:01:cd:fa:24:9b:1b:fb:82:b4:26:
f5:f8:8b:cf:59:b6:77:8f:22:8c:35:47:ad:70:1a:
d1:46:32:27:54:56:67:05:45:a2:8a:24:66:e4:f0:
7f:44:e9:66:ac:00:dc:66:39:54:eb:a5:1a:ad:34:
03:e0:55:04:90:0c:de:08:95:d4:38:ae:02:4a:e7:
d0:55:1a:cf:27:f6:95:69:19:7b:82:7a:c4:17:41:
f7:6d:04:2c:13:f7:22:40:00:1c:95:21:c0:72:87:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:92:1E:C5:14:84:59:FE:3D:1F:96:10:EA:E7:80:1E:DB:7D:CF
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:4c:d1:88:32:26:32:e6:8f:9f:72:73:97:50:08:03:d3:
bc:db:da:25:7b:39:8a:70:8b:6a:e1:85:3a:52:44:36:84:d8:
06:1c:dd:c4:b9:ca:3f:05:40:fc:d0:8d:64:ae:c6:e4:cc:5d:
08:d4:d8:a0:26:a4:67:db:4d:f5:5c:bf:ab:18:70:b3:e9:a8:
07:ec:23:bb:f2:cf:1a:1b:6d:17:de:04:0b:9c:c3:a8:84:1e:
a3:5b:b9:17:4f:37:e9:a6:ad:7c:3f:06:1d:5a:f0:82:ed:e7:
50:f0:45:bc:79:a5:ba:5c:aa:b6:16:58:3c:8e:8f:9a:32:f8:
fa:6f:60:ba:a2:c0:c9:86:28:a8:86:4d:4a:dc:7b:f6:16:44:
23:a9:a0:1c:41:20:c9:9c:c5:5e:78:4e:12:8f:c8:e1:3e:0b:
37:31:f0:ea:10:42:aa:af:b2:18:33:ad:71:4a:ad:96:33:6e:
02:0b:56:7d:05:59:2a:99:65:3d:26:de:97:a7:cd:7d:b5:41:
ea:ff:24:e8:26:4a:99:e1:5c:d9:d4:16:bc:75:bb:d9:91:e5:
96:13:3b:9a:c4:7b:5b:2c:5a:25:03:ff:a3:d4:97:e5:88:01:
b9:0a:52:8c:29:e9:94:df:50:79:bc:19:57:e9:17:83:f1:c3:
ff:60:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:38 2025 by rpki-client