Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: ae5/p9uB9ZZhV/yHkWglXcs5RJ8pWoXEV9bIWMXiqKM=
Subject key identifier: A6:13:66:80:30:2A:2A:D2:23:3D:41:A6:D1:D5:94:D9:6C:E8:8C:30
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0198D4E04948D95E3B9B2089577B0F0213DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 0617
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: WC0LvpXCZ1JovoGzLUszT0xjH3ISYuDAv0+5f3AGhNc=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:49:48:d9:5e:3b:9b:20:89:57:7b:0f:02:13:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=a6136680302a2ad2233d41a6d1d594d96ce88c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:3a:15:d4:0c:e0:07:47:46:de:d8:ec:ee:
63:a7:ed:8c:47:69:06:7e:45:7d:ea:83:c9:be:42:
ba:e4:84:e8:99:3b:81:b7:cb:d9:f1:3c:88:fb:b7:
54:19:6e:cb:3d:81:98:98:3d:29:f8:ef:e6:20:18:
f7:83:e5:52:e1:82:df:44:90:b9:ba:9e:f0:9c:12:
cd:57:6e:c6:cd:c1:d1:37:f3:1b:45:ec:3d:aa:7c:
0f:40:b0:61:b1:06:89:a5:96:ca:61:ae:56:4f:08:
e1:46:5b:d5:eb:15:70:ae:88:fb:3a:3b:28:92:6d:
43:f5:34:51:97:45:5a:b6:42:ec:61:60:02:92:a2:
e0:13:a9:c5:18:60:91:47:d5:27:eb:d0:5e:fc:27:
ec:a7:af:ba:9b:78:24:43:12:fc:fd:bd:66:a8:f0:
47:f3:35:e4:f6:25:38:26:26:d7:f3:65:9c:91:f8:
43:cc:31:19:43:b8:2f:ea:70:b9:9f:eb:c0:1c:0b:
00:23:f4:09:1b:1a:c0:a1:dc:84:8b:6d:13:6f:46:
6f:5b:57:20:9e:5d:64:9f:af:93:20:2f:97:08:da:
61:34:51:b3:f8:23:ca:c2:d6:ab:f9:1c:82:f9:59:
01:73:5b:f5:ed:8d:40:d3:77:82:c9:d8:bd:a5:27:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:66:80:30:2A:2A:D2:23:3D:41:A6:D1:D5:94:D9:6C:E8:8C:30
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e9:70:0f:bc:48:5a:99:56:eb:00:8b:ad:da:08:ae:45:4f:
2c:81:81:fc:f7:90:e9:0e:5b:ed:03:44:a3:68:45:e4:e7:1a:
22:45:95:31:dc:e8:26:6b:7a:7c:02:bd:6e:0a:4e:05:9e:2a:
6e:d1:79:60:1c:94:ef:ab:63:d0:9a:a0:8b:ef:93:2e:fc:a4:
f1:56:5d:c3:af:f9:8a:aa:f2:da:08:21:3f:56:2c:8c:88:92:
d4:d8:56:d1:b9:84:75:25:ad:35:f7:97:c2:6d:5a:0a:4f:11:
a6:db:4d:c5:64:df:2f:87:89:8d:a9:3c:01:ac:ca:2f:b8:ce:
ca:4d:80:2d:f1:62:9d:ba:06:08:01:ca:e1:31:77:24:e1:07:
f6:22:59:07:2d:b9:b3:aa:47:c3:df:4a:94:39:92:ec:e5:c5:
6a:d5:df:06:aa:0b:ff:d5:e2:e3:bc:90:1d:1d:5c:e8:bf:1d:
82:e4:6b:2b:72:e9:20:1f:84:b5:82:aa:fe:3c:7e:64:bd:24:
6c:8b:08:4f:27:a3:fa:fe:a1:d8:34:5f:93:0f:c5:a1:bf:0a:
01:37:ae:80:08:c3:ba:e4:e9:27:59:99:31:68:e4:b0:ff:93:
38:13:4f:9e:e7:cb:cf:cf:df:4c:ac:88:82:18:6e:37:03:10:
54:bb:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:08 2025 by rpki-client