Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: vpkpEYi3mrIp0Na8/PxexlKSxaRz7TIjoyol4l8saYw=
Subject key identifier: 7B:AA:61:5D:E5:0E:48:5B:60:FB:54:A4:B8:04:2B:3D:0E:44:9B:DA
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0198D705A7725F8B97189AC20CB7C07AF8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 140B
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: 1VvWbJXnGxkGF1v9D5vnae/dO7uV34dgnTxMBHbkAMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a7:72:5f:8b:97:18:9a:c2:0c:b7:c0:7a:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=7baa615de50e485b60fb54a4b8042b3d0e449bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:b8:3f:6d:0a:dc:5f:13:c8:e6:58:82:d7:
90:bd:96:f0:b8:5b:f0:be:9c:0f:d9:7c:b0:f0:80:
e8:99:85:af:3b:c0:42:8d:40:ee:77:bf:36:a9:50:
e6:90:83:c6:fb:fb:eb:f8:7c:cc:44:6a:f3:b0:02:
78:c7:33:9c:5b:c0:8e:2c:d7:1d:a6:d6:c7:3c:b1:
63:42:82:1b:69:08:fe:35:7b:fc:04:f5:48:87:26:
e8:c8:74:cf:38:46:45:62:96:e3:e6:92:ef:f0:d4:
84:3d:5a:b1:26:fb:b9:bd:c9:3f:ca:5b:fb:1a:a4:
53:47:75:eb:c4:3b:6b:71:ad:96:63:ba:db:28:60:
35:7d:3a:af:d5:5d:54:e6:7c:e1:06:2d:76:c7:7b:
47:d8:3d:e6:92:15:14:94:62:eb:52:f3:f1:75:79:
60:bb:db:1c:30:1a:7a:3c:c7:a3:fd:98:ec:ae:00:
50:e0:f2:1a:ca:b7:ea:f2:22:d7:c4:75:8b:e4:78:
f4:75:fa:fb:89:15:56:9c:c0:f9:37:74:3e:83:28:
28:46:75:3e:ef:b0:b7:8b:ed:38:d6:d3:29:20:b8:
4b:2b:29:6f:07:29:48:52:db:7b:0a:99:a7:a2:22:
63:df:fd:15:44:f2:e9:0d:3f:8c:00:35:6e:5f:15:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:61:5D:E5:0E:48:5B:60:FB:54:A4:B8:04:2B:3D:0E:44:9B:DA
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:c7:73:70:c9:04:08:9a:21:45:04:41:2d:8e:8d:4c:a1:
fe:5f:59:0a:a3:68:1a:43:b6:b2:52:3b:cc:3d:01:e2:91:ab:
7a:f4:2c:17:56:c2:70:9a:e9:99:47:96:a0:6c:f4:82:f7:35:
87:28:3a:a1:a8:4b:c2:65:69:65:da:47:51:40:f7:d2:7b:95:
4f:d2:45:ca:1e:8f:50:2e:6d:c3:aa:73:c7:f1:40:c3:e2:fd:
ca:8f:ad:6c:8b:0e:56:fb:e2:34:ff:00:29:63:14:82:a5:57:
46:c9:35:cf:3d:5b:91:06:81:84:43:f9:16:67:89:43:9c:d4:
86:ff:9e:c9:cc:48:07:46:eb:71:85:1c:bd:0a:91:31:13:f1:
3c:47:54:75:7c:b1:48:ff:ac:f8:09:aa:5d:6b:13:f9:cb:bf:
9d:fd:b5:fa:ef:c4:97:5f:28:73:eb:1f:c4:7c:01:59:c1:f3:
5c:49:4d:05:a0:7d:83:ad:a0:b2:fc:3f:cb:e8:a8:83:93:ea:
7d:a1:dd:d2:c9:01:32:09:d9:f9:f4:ab:ad:9e:ef:b7:20:60:
3c:d0:c0:43:ec:80:a5:11:7b:a7:47:30:ec:da:f3:99:7b:b5:
be:5c:f9:af:65:9f:4f:55:da:65:c4:24:ae:7a:2a:c0:03:8a:
58:6a:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:32 2025 by rpki-client