Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: xgV4yZFC+pfWKcizkQNYHWiEftJYvw9m5R+0vn+YaZ8=
Subject key identifier: 5A:30:46:CE:18:C4:88:F6:39:56:3D:6B:F9:90:12:72:3B:67:71:0C
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 0198D5BC23D9662196C8EA51F6F0DF28481F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: 45
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: r2F11G066po9BEhtp8vr7BZLXrA/57uYd5JO7QWwW0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:d9:66:21:96:c8:ea:51:f6:f0:df:28:48:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=5a3046ce18c488f639563d6bf99012723b67710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:0e:fc:c3:3e:07:a0:67:b9:dd:77:86:d8:
c9:6c:ae:09:c2:54:75:7b:d1:16:fe:1f:aa:97:56:
62:68:b0:56:47:c2:d1:77:49:b6:fe:86:9e:10:a8:
c1:c7:ba:71:4f:01:50:ff:0d:51:fd:d2:fe:0b:17:
cb:6a:cb:4a:72:73:53:49:f5:53:2f:a4:a9:27:d6:
4b:5a:60:29:9c:8a:80:8f:7e:dd:ab:6f:12:cb:41:
ba:b1:ef:a2:0c:cc:39:32:22:0f:92:5d:90:e0:1d:
84:12:01:46:bf:ac:b5:cc:5e:3b:36:80:8f:b8:fb:
36:aa:3d:8e:13:68:30:5e:0d:a6:7c:fa:9c:f8:a1:
3e:e5:a9:aa:88:bb:9b:ab:ee:f1:fb:ac:92:c9:7c:
ab:46:c8:5b:65:f2:19:b3:e1:6e:09:cd:d8:8c:d2:
b2:82:64:77:05:9a:ed:e2:e3:69:50:03:0f:67:28:
5f:b4:f5:33:9b:97:3c:01:9c:80:8c:76:f6:89:99:
89:f6:14:6d:04:2b:c2:d7:8c:58:bd:10:bf:51:e6:
e8:40:66:a0:2f:92:eb:d6:90:20:d4:46:8d:71:07:
b0:d5:0f:48:0a:19:79:ce:b4:58:86:e8:af:11:f6:
42:1c:d7:6c:ed:14:1d:0c:f8:b3:22:39:d4:b5:e7:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:30:46:CE:18:C4:88:F6:39:56:3D:6B:F9:90:12:72:3B:67:71:0C
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:fe:0a:92:5e:09:bb:00:81:d6:b2:b6:f1:b6:c7:c2:9e:
06:35:11:ff:dc:67:73:5f:1e:a4:27:8a:0b:be:f8:32:74:3d:
dc:0f:3b:27:22:e7:89:fa:6b:33:8b:c7:b3:0d:8b:28:ab:80:
3b:83:c0:b6:0c:43:66:14:e9:da:73:32:3a:a5:e5:13:42:39:
25:06:26:b4:23:f8:fd:01:11:df:2a:8b:7b:f6:12:81:dc:5e:
59:f2:d2:65:45:c5:b1:36:bb:2b:cd:ae:df:b6:7e:2e:a8:56:
7d:fd:17:a6:20:4b:42:ec:2b:f2:93:03:94:1f:d3:73:e7:f5:
b6:89:65:b8:f8:82:40:85:0a:64:36:38:dc:8f:c0:40:34:00:
2c:a7:10:9c:52:77:32:d0:95:a5:2a:01:43:b7:57:2d:f4:19:
a6:91:7b:4e:fe:20:f8:78:40:f2:ff:4f:15:2d:0f:53:58:41:
47:00:90:26:65:e8:3e:6b:ec:62:53:0f:11:80:5e:1a:d2:e9:
52:ab:78:57:77:67:e6:50:3e:4d:5e:16:3a:9c:ad:ec:d9:9c:
54:69:e7:a4:f7:55:97:34:90:60:fe:73:b1:f5:7b:44:cd:55:
cc:01:98:b6:cb:18:a8:a8:f9:d1:80:6c:07:a0:97:4f:c9:e2:
d4:b8:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:36 2025 by rpki-client