Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier: Y0KXILM+B+hb++70ix9/PST9PfgqrSb4ULJcN6hM13A=
Subject key identifier: 00:0E:A6:2E:0D:16:69:4F:FB:74:84:77:4E:AB:50:2A:4D:A4:BE:C0
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 0198D51580E2ACB0049A9F32D108BF6242C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number: 0BAE
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=)
2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: KxwmVeL138ADf2GUFjfqFlDJXZJtbREIlJoG88Tpb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:80:e2:ac:b0:04:9a:9f:32:d1:08:bf:62:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=000ea62e0d16694ffb7484774eab502a4da4bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:95:36:ce:d7:e5:34:1c:c0:88:42:2a:d4:
24:fd:64:27:51:6a:c2:8d:90:0c:05:06:e0:cd:71:
e3:9f:fa:84:f4:4a:4a:02:0f:dc:4a:b7:5d:02:09:
9d:5d:e4:0d:f2:96:dd:87:e5:69:02:16:a6:07:93:
d0:f8:c1:25:76:8b:fd:0b:3a:ce:29:08:fd:36:d2:
1f:75:65:49:69:b8:06:57:61:ba:b8:bc:58:9c:8a:
b3:39:6a:7e:22:69:c1:81:d2:d1:e2:9f:48:67:31:
28:c1:3a:91:24:41:f6:1d:ef:0a:6f:a2:5d:61:ad:
bb:d6:b6:79:7c:8e:dc:a0:4c:7f:f5:41:b7:a6:40:
af:38:de:60:8c:9b:78:fa:e5:f6:20:3f:52:7f:3e:
09:90:8e:02:22:ea:06:ab:b6:9d:eb:46:e8:c6:a2:
46:2f:46:a8:17:6f:58:4e:5a:c1:3f:c0:80:4a:5b:
0f:56:4e:6b:8d:cb:67:a9:81:0d:32:a5:67:4f:8e:
f2:4b:40:c6:2d:0e:24:6e:0a:04:6a:38:c7:ca:48:
ee:50:7d:ea:83:1e:dd:7d:ed:55:74:16:97:b1:33:
78:e8:06:69:4c:09:f4:da:2e:8f:52:99:76:be:3b:
ec:95:e9:16:ce:93:d3:ea:d5:41:48:0a:32:69:c4:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:A6:2E:0D:16:69:4F:FB:74:84:77:4E:AB:50:2A:4D:A4:BE:C0
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:46:c0:bd:2a:5a:d8:c3:c8:e9:8b:09:60:05:d8:47:3c:
99:c5:71:96:a0:36:b9:b2:0d:29:e0:a6:27:2a:c9:7c:62:e0:
af:03:cc:99:ad:8b:95:a3:d2:87:d0:e9:79:34:ab:15:90:aa:
80:12:f2:8f:65:19:f3:3b:da:96:77:98:d5:85:68:af:c3:70:
a2:52:96:84:5e:70:fe:81:d8:66:10:45:03:fe:7e:8a:e7:e6:
dd:e0:61:a2:22:ee:68:31:a2:45:c6:44:33:b0:5e:7d:fc:d7:
c1:d7:c3:b0:12:ab:38:8c:d5:1e:1d:7a:b9:8a:15:31:b0:46:
b5:a5:9f:d1:fe:27:c0:3b:68:87:37:c4:5e:a2:76:a3:50:57:
30:19:a6:6a:4a:91:cd:57:17:fd:46:33:40:16:54:31:7c:7a:
76:d8:f0:5a:08:f9:3f:94:49:60:88:94:c6:59:de:74:54:00:
43:21:d4:7c:74:dd:4f:94:78:41:b9:94:1a:88:cb:3a:e7:82:
55:29:8c:ea:b6:13:66:44:03:7e:e4:4a:47:71:bb:dd:51:37:
85:e9:32:fd:34:ed:8f:f8:d2:c2:ce:8b:56:9a:b1:f7:07:ef:
7e:17:68:ec:85:97:f6:53:21:f1:8a:0f:c8:29:6d:cd:b4:8f:
1c:eb:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:42 2025 by rpki-client