Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: tWxOa6diP9NWSGboMwxi7Ggpi7UViZQmh5085C+yW5U=
Subject key identifier: 0D:CE:C8:2C:F0:F6:3A:C9:8B:43:24:DF:12:A1:B1:95:C2:79:3D:CB
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0198D54E205AE60BF8004F902F27175EE2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0C1C
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: NJja6bswL7p8IJcYKMxBcV1cjCQXwwLLOB5HryPbZh8=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:5a:e6:0b:f8:00:4f:90:2f:27:17:5e:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=0dcec82cf0f63ac98b4324df12a1b195c2793dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:14:8c:f8:31:20:36:7e:39:c1:e8:74:de:
b7:fb:c2:76:46:9f:8d:17:ae:d2:7b:7b:8b:b9:99:
81:62:40:7e:3a:f3:87:0b:e3:3a:47:87:05:c0:1b:
eb:bf:5d:19:35:79:a1:ae:5b:ca:84:6f:dc:4e:e1:
1d:eb:35:8d:24:8e:d5:f2:f9:5e:72:09:9d:f4:e4:
50:19:39:3e:4a:16:07:30:69:bb:0c:9e:50:e7:75:
0b:96:be:de:e8:98:d0:e8:8e:48:5f:c8:fc:a4:cb:
b3:2c:7b:9b:33:50:c8:eb:86:49:58:f5:8c:32:5c:
21:a4:14:01:d9:76:3f:7a:b6:bb:4d:0d:3a:00:b4:
bc:60:12:e5:f3:57:00:f9:95:42:a1:11:13:8d:c6:
4d:10:98:32:c5:38:78:a9:61:05:5f:1a:d9:b1:77:
8f:77:33:fb:22:f3:10:1a:ce:eb:61:f6:d5:dd:93:
07:49:c1:69:05:8b:1f:b5:4f:20:b7:74:46:9c:e6:
d1:58:f7:d0:a5:fb:f0:ef:9a:b8:01:cd:fe:92:db:
fe:9e:a8:a3:4f:b6:2d:4d:f9:0b:af:11:3d:c8:cc:
0e:53:11:d1:07:ec:27:25:79:6f:56:e5:2e:05:7c:
e1:e1:e3:24:96:4d:59:80:95:60:e7:ff:8a:de:5e:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:C8:2C:F0:F6:3A:C9:8B:43:24:DF:12:A1:B1:95:C2:79:3D:CB
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:9d:81:02:f0:ed:cd:f1:82:f4:8e:03:41:d6:3d:0d:cc:
a8:4a:5e:48:09:c2:4d:8d:b4:96:ab:27:bd:e7:0d:17:55:b2:
61:fa:5f:62:5b:83:67:34:74:72:67:e1:b7:c4:ed:9d:9e:a5:
69:7f:74:a7:25:26:0b:08:05:e1:eb:89:47:9d:67:ab:91:b0:
16:1f:bd:36:70:da:90:44:20:f1:73:6a:af:c0:b7:8c:3d:49:
0c:1b:81:3f:f0:60:a1:57:7f:b3:67:e5:fa:ed:cf:b4:ff:c9:
9c:18:c5:a5:8c:40:04:14:1b:d9:6d:91:8c:c8:a0:98:ed:00:
de:8a:34:36:f2:36:ee:8c:8c:e0:dc:41:0d:71:32:3e:9a:e6:
09:5e:12:b9:26:a6:d7:51:d7:5b:e2:56:9e:a5:b4:44:69:ae:
00:42:db:2a:5c:1d:ac:7e:ae:67:12:af:34:e8:77:b2:50:93:
75:0e:30:e4:31:cb:3c:fc:32:5e:c8:16:c8:7a:f1:f4:e8:4e:
48:7a:79:fe:29:3f:33:12:1d:49:c9:10:a4:4c:a8:00:e9:38:
cc:ce:e4:f8:3b:a9:04:ab:fe:3d:3c:8c:c8:41:bf:06:89:8b:
59:bf:fe:42:60:d3:82:39:52:cf:9e:b0:2e:79:93:7f:d2:f8:
10:be:19:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiBa5gv4AE+QLycXXuLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi
MWRkNDYwHhcNMjUwODIzMDUwMjAzWhcNMjUwODI0MDUwMjAzWjAzMTEwLwYDVQQD
EygwZGNlYzgyY2YwZjYzYWM5OGI0MzI0ZGYxMmExYjE5NWMyNzkzZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AgUjPgxIDZ+OcHodN63+8J2Rp+N
F67Se3uLuZmBYkB+OvOHC+M6R4cFwBvrv10ZNXmhrlvKhG/cTuEd6zWNJI7V8vle
cgmd9ORQGTk+ShYHMGm7DJ5Q53ULlr7e6JjQ6I5IX8j8pMuzLHubM1DI64ZJWPWM
MlwhpBQB2XY/era7TQ06ALS8YBLl81cA+ZVCoRETjcZNEJgyxTh4qWEFXxrZsXeP
dzP7IvMQGs7rYfbV3ZMHScFpBYsftU8gt3RGnObRWPfQpfvw75q4Ac3+ktv+nqij
T7YtTfkLrxE9yMwOUxHRB+wnJXlvVuUuBXzh4eMklk1ZgJVg5/+K3l425QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3OyCzw9jrJi0Mk3xKhsZXCeT3LMB8GA1UdIwQY
MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt
MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj
LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKadgQLw
7c3xgvSOA0HWPQ3MqEpeSAnCTY20lqsnvecNF1WyYfpfYluDZzR0cmfht8TtnZ6l
aX90pyUmCwgF4euJR51nq5GwFh+9NnDakEQg8XNqr8C3jD1JDBuBP/BgoVd/s2fl
+u3PtP/JnBjFpYxABBQb2W2RjMigmO0A3oo0NvI27oyM4NxBDXEyPprmCV4SuSam
11HXW+JWnqW0RGmuAELbKlwdrH6uZxKvNOh3slCTdQ4w5DHLPPwyXsgWyHrx9OhO
SHp5/ik/MxIdSckQpEyoAOk4zM7k+DupBKv+PTyMyEG/BomLWb/+QmDTgjlSz56w
LnmTf9L4EL4Z4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:42 2025 by rpki-client