Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: +gj2a5vPCdZAMZIZkKmB8akXzhmi3OStG5VOL9It93E=
Subject key identifier: BB:34:48:D9:A5:E7:CE:E4:3A:B0:8A:FB:32:3B:B9:C6:59:1D:5A:86
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 0198D583DCDCCD4F55A34F98783E9AF2FCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0A4C
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: xcjeqbXnE3NiNG5Y9HfT4xfWErF3LvU0qyyw3nPY8RA=)
2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dc:dc:cd:4f:55:a3:4f:98:78:3e:9a:f2:fc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=bb3448d9a5e7cee43ab08afb323bb9c6591d5a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:65:f0:89:f2:9c:a6:ac:44:86:f6:88:d5:
86:6a:eb:7a:1a:61:14:a2:e4:20:f2:9b:c4:71:48:
13:6a:5a:dc:37:67:df:8a:8c:9e:e7:b9:2d:d3:36:
e0:98:ed:10:9a:72:53:c3:90:dc:1a:3b:b3:05:60:
e7:f0:57:db:00:53:98:d2:b2:46:a4:26:c9:f1:16:
17:78:ef:76:9f:5b:21:63:e4:f7:dd:ee:06:b8:9e:
38:3b:81:30:0b:bd:dc:4a:ac:3f:a7:ea:ad:41:95:
75:e1:0b:6b:7f:17:74:bd:d7:09:b8:ae:f7:4d:bb:
62:82:a0:50:0c:90:37:1c:5a:9d:44:9c:5d:aa:d3:
a5:c2:81:c8:26:d7:12:3d:80:08:16:0a:f6:a3:e5:
55:33:dd:11:51:2f:fd:a0:8f:c2:74:64:45:d9:f3:
98:bf:c1:4f:bd:36:e6:a9:09:f0:c8:a3:eb:90:44:
2b:39:18:e0:31:e0:8e:fb:46:9c:ef:3b:bf:0e:57:
db:54:68:14:10:16:7e:e2:c3:2c:e6:4f:35:c2:d7:
c3:32:e0:7a:5c:dd:0b:2a:44:e3:fe:be:42:09:46:
ba:6d:67:20:07:16:e9:d7:ad:9e:76:d1:eb:ff:f4:
0a:49:26:e0:5a:2b:de:8d:47:56:cb:7c:88:e0:eb:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:48:D9:A5:E7:CE:E4:3A:B0:8A:FB:32:3B:B9:C6:59:1D:5A:86
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:94:f5:b6:15:b4:7e:40:7d:b7:07:fe:8d:19:3f:6d:a0:
d1:17:fc:ed:cf:75:b6:8a:28:83:aa:f7:5f:8c:c6:cd:26:3b:
68:2f:c2:7f:fb:99:80:7d:6f:ed:e7:7f:6a:f4:fd:72:40:eb:
c5:55:17:2f:7a:be:ef:31:00:92:99:dc:de:f9:d5:99:92:09:
a0:9f:2a:38:24:19:87:ae:c8:08:93:3f:87:1c:12:18:ee:a2:
d4:ca:0a:9d:cc:68:3d:16:6c:b6:8e:ca:7b:ef:1a:85:8d:42:
28:e4:96:7e:20:ae:5d:4a:23:82:3d:73:21:50:ef:2d:b6:af:
b1:ea:7a:ef:64:b6:0c:8c:9a:4e:3b:a3:7f:c0:42:03:59:f2:
a3:97:6a:1e:48:1f:d8:66:6e:d9:5a:c0:ad:53:3c:85:30:3f:
fb:57:03:46:68:6d:10:8e:4b:d4:70:ff:2a:a6:e8:35:f2:5a:
d2:18:b5:23:17:9c:da:57:57:9e:04:3f:c7:0f:b7:87:bc:b7:
b7:e2:e6:0f:15:b3:54:12:7c:c2:09:83:d1:96:1d:02:af:f1:
be:82:3f:5e:8f:9b:0e:6b:d7:d3:86:e4:76:6f:42:fb:d7:7b:
87:5e:2c:09:97:6a:b1:73:dc:7d:dd:28:f2:68:cf:1e:cc:b8:
b2:fe:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:56 2025 by rpki-client