Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: mSoHCsYglKiHOtX84HHhEfmmLY6SX0bRNosPNVuvAe4=
Subject key identifier: CB:FA:15:66:64:50:4E:5C:6A:D0:A0:7B:2F:F1:67:26:77:FC:D8:E5
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 0198D660FC049DA1F756CDBC5ADC51A3507B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 022F
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: n+a+LulBxlpw/XnaFTd/Yga03LL76eVH91NyIBV8CHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fc:04:9d:a1:f7:56:cd:bc:5a:dc:51:a3:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=cbfa156664504e5c6ad0a07b2ff1672677fcd8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:db:c0:dd:7b:94:eb:07:b5:99:ce:62:54:
80:fe:f6:4a:f5:61:f1:53:99:dc:17:a6:c8:20:29:
a9:b1:ea:73:9c:39:3f:da:d4:38:5f:2d:73:42:20:
ca:48:93:71:e2:4e:8c:7b:9b:13:e2:2c:f4:44:87:
c3:1c:95:e1:93:c6:44:3f:74:64:dc:83:d8:9c:02:
a0:f7:f0:76:21:7c:4e:7a:3c:77:15:3f:ef:ea:bc:
1c:4c:a5:5c:ac:e9:ec:03:26:44:0f:81:07:d8:e8:
ba:99:df:8e:9f:ac:d7:88:80:63:07:ab:6c:9d:7a:
92:74:23:03:b4:5e:e0:12:47:2a:38:73:9a:14:dc:
d6:68:ab:29:75:1a:7a:e5:58:bd:e6:e8:51:88:6a:
ba:17:4d:0c:ae:63:3d:d3:a9:30:2c:08:05:12:4f:
54:9e:8e:17:d2:00:fa:cf:b8:25:98:e1:97:07:76:
e5:c7:3e:6b:fd:14:e9:4c:c8:97:68:d8:b5:cf:9f:
e1:39:79:b7:59:b0:2a:ab:22:92:36:06:81:18:80:
7d:31:d3:8b:86:27:11:4b:a3:fd:7e:7c:b6:fd:79:
b5:c8:d7:62:8d:aa:24:e0:24:a2:6b:a6:03:1f:08:
07:ba:3e:9b:f2:40:f1:89:a0:84:b7:1c:3f:79:8f:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:15:66:64:50:4E:5C:6A:D0:A0:7B:2F:F1:67:26:77:FC:D8:E5
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:41:e7:5c:0b:c3:b7:9e:6c:ba:b6:7a:d4:14:87:35:97:
f4:7f:64:da:10:ae:94:68:37:7e:6a:a3:32:c9:d6:57:58:ef:
58:47:21:d5:1d:3d:2f:88:28:06:82:5e:41:6c:53:c8:91:45:
62:8c:f7:8b:36:0f:62:b1:2a:40:e9:c4:95:91:2c:bd:27:f4:
41:80:01:af:ba:14:37:3d:62:5f:2d:1b:06:4a:67:b1:41:2a:
a5:e7:e2:6b:8a:ae:b2:02:c7:b2:e3:1c:2e:15:71:e2:88:aa:
d9:e3:c9:c8:28:29:64:76:cb:9c:63:96:3d:4a:70:f3:c3:35:
ef:e1:0e:c1:1f:94:ee:93:bc:db:ff:45:bf:25:34:11:2b:04:
fb:f4:89:0a:c4:cd:0a:95:1a:39:79:bf:90:2f:3e:1d:2d:e7:
a6:e9:11:b5:26:51:12:25:19:8a:37:82:e2:ab:71:7b:f4:88:
c0:67:3a:77:bd:01:57:b5:34:7a:79:20:f6:4b:26:dc:af:36:
27:bc:c2:7e:4b:5a:89:ba:cc:b6:98:6a:5a:80:70:f2:ff:0d:
9d:bd:96:06:90:ed:a4:0d:a1:58:6f:58:41:9e:88:af:e4:92:
19:d9:f3:9c:4f:55:8f:cb:d1:39:9b:a6:da:6a:47:b1:ce:e6:
f7:02:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:53 2025 by rpki-client