Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: PBiqefW41p0ftMKVgTSh7Nw8fzbiXJJvsxo3bhtaIzY=
Subject key identifier: 91:CF:C0:23:61:99:F4:3E:6A:DB:AA:0A:F2:AB:14:A7:F6:49:5A:B6
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 0198D4E0D46E98C44B5ADA0180FBB0AACD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: qiEIjT6HJvyuTwGPwC+g3DYfvzju8Zzk03QFVp+p+Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d4:6e:98:c4:4b:5a:da:01:80:fb:b0:aa:cd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=91cfc0236199f43e6adbaa0af2ab14a7f6495ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:03:ad:27:24:ca:a2:0c:e6:88:c5:c9:9f:
a6:ee:18:2c:28:74:ef:f7:d3:c5:32:97:d5:87:e5:
58:2b:39:71:ae:3d:74:de:e0:e0:aa:a5:66:1e:7b:
45:0d:13:00:c1:2c:2a:1d:8f:5d:fd:cc:c7:81:bf:
20:1c:dc:a1:ff:c6:6e:27:f8:83:09:96:9b:3a:77:
a4:e6:fe:b4:9f:d8:20:ae:cf:11:64:22:04:62:c7:
ab:0c:ff:e4:a5:8f:08:d9:50:8f:0f:c7:60:51:f4:
9e:c7:32:5a:ca:97:32:ae:7b:47:06:bd:a8:61:94:
9d:3b:3f:e4:77:c3:a1:f4:33:58:15:47:7f:b6:a1:
9b:90:0c:94:e8:1f:e1:2e:52:2e:e3:46:6c:7b:08:
23:65:d6:79:fc:60:66:c2:ba:bb:7d:c4:68:a5:4b:
d9:e8:9e:82:f2:ae:dd:03:33:80:ab:f3:19:ed:a2:
a7:3f:dc:26:1a:f6:05:d7:c7:f9:c4:90:65:f2:47:
99:22:a7:d9:40:ae:a1:20:f7:ff:33:9e:0d:ba:41:
9c:e4:4b:fc:23:de:d1:d1:42:8c:a7:85:d0:e7:df:
15:fb:03:9e:ec:53:8f:bf:9e:fe:85:c5:1a:d8:cc:
8a:b1:5a:f8:bd:7a:cb:65:63:4c:3e:64:fc:a8:39:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:C0:23:61:99:F4:3E:6A:DB:AA:0A:F2:AB:14:A7:F6:49:5A:B6
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dd:3b:78:aa:aa:86:35:84:72:87:9f:9c:58:92:2e:1b:67:
c7:16:f8:11:e8:99:28:84:de:01:1e:f3:f3:79:27:c3:cd:63:
c1:de:85:e8:cd:ad:83:2e:a0:4f:77:56:27:eb:5a:5c:8e:5b:
09:f3:70:dc:26:42:29:43:75:76:89:55:23:95:0e:16:54:e3:
d2:45:e9:af:20:90:ff:0d:a5:9e:89:ae:38:05:20:b6:5e:87:
90:5e:eb:80:6b:7c:39:ef:47:49:92:01:29:44:31:4c:ff:ef:
4a:c8:d8:97:de:2a:66:a5:37:74:ba:6b:12:4e:b3:8c:10:a9:
12:79:c4:6c:ce:7b:57:82:ae:b5:cc:5b:b3:8f:69:3e:f9:a2:
36:3c:0a:7f:13:6f:5c:71:f1:6b:77:16:f8:61:f8:ec:b3:2a:
82:ec:15:c4:e4:00:ed:91:6b:3a:11:03:5c:a0:7e:b6:8f:17:
03:38:4a:8d:30:dd:cb:8c:12:96:20:31:76:90:f3:3c:c5:53:
77:56:2f:ff:a9:45:9a:04:e6:a8:ae:04:71:11:b5:db:8b:d7:
68:ea:4f:70:6c:08:ba:8c:12:92:87:a8:78:50:a3:71:77:1b:
2c:f9:02:a4:51:ff:b0:36:ec:15:11:a3:d6:34:4f:ef:7b:39:
11:59:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:38 2025 by rpki-client