Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: imsB453KiQa5CkFServ7pNLd0KWEXqnnNNWfSIMdrCc=
Subject key identifier: DD:80:BA:31:40:5D:CB:15:89:B5:0E:C9:F8:09:B2:F2:BD:95:FB:32
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 0198D706250CEB91F83358C88D8DE6E0BF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 05BD
Signing time: Sat 23 Aug 2025 13:02:40 +0000
Manifest this update: Sat 23 Aug 2025 13:02:40 +0000
Manifest next update: Sun 24 Aug 2025 13:02:40 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: qu3I0HayBRdaM1pQ5dlvui62YrYB5TZFAzbxcE8ltVo=)
4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:25:0c:eb:91:f8:33:58:c8:8d:8d:e6:e0:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Aug 23 13:02:40 2025 GMT
Not After : Aug 24 13:02:40 2025 GMT
Subject: CN=dd80ba31405dcb1589b50ec9f809b2f2bd95fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:ff:58:19:20:3b:18:7e:d8:4c:c5:bb:ff:
ff:bc:e7:f4:b8:a2:d8:f7:90:b4:91:8f:8b:5f:0b:
5d:dc:2d:f3:53:cf:b8:20:91:d3:59:94:fa:7f:a1:
98:81:ed:90:f0:df:9d:65:98:24:02:57:b5:b7:1a:
9f:0a:5b:9f:d2:be:6f:58:41:66:61:02:3e:95:a4:
d1:24:84:41:40:62:7a:f2:22:32:a3:c5:de:aa:99:
53:60:95:e9:24:2a:2c:36:39:f5:ff:f3:32:47:c9:
f1:30:17:73:f5:90:5f:ff:ca:87:87:5a:b7:ca:b9:
33:2f:76:34:82:4a:93:c7:72:88:dc:d4:13:bb:f6:
a7:f4:5c:c8:96:a0:4c:19:ec:38:7b:af:f1:a0:b6:
21:8b:c1:fd:9b:9f:8a:c1:7c:a6:8d:b8:a4:b1:b5:
91:78:7c:44:4e:73:de:7c:0f:d9:a8:37:6b:48:63:
77:dc:83:4b:9b:6d:82:51:f5:cc:d6:cc:33:37:e8:
cf:e7:9a:4e:d0:9d:7f:b5:ce:db:3f:8d:c2:ec:d8:
2d:e1:6f:41:62:2a:f2:4f:96:4f:93:21:ed:a0:7c:
98:18:c1:82:09:55:3f:7c:0d:8a:32:d4:9f:a5:a6:
b3:3f:7c:85:87:1c:c7:86:7b:aa:f5:b0:4c:ee:20:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:80:BA:31:40:5D:CB:15:89:B5:0E:C9:F8:09:B2:F2:BD:95:FB:32
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:40:7a:86:63:75:86:e9:4d:c4:e0:5c:96:99:a9:5c:80:a6:
33:be:d1:9f:58:7c:39:74:ca:72:30:8f:f1:66:d2:31:b6:22:
a6:a6:a3:6e:bb:cd:cc:14:a0:01:9e:a9:b9:01:af:3b:7e:c9:
77:84:b3:54:ea:df:ab:7c:eb:ec:20:a2:90:83:b7:12:6b:bf:
0a:ab:0a:07:b4:29:c0:89:ed:92:a2:72:c2:bd:27:31:d7:f9:
1c:aa:48:54:ee:1c:57:d2:fc:0c:85:f7:e3:b3:ea:41:9c:e6:
6d:b9:10:61:99:8b:f3:de:32:a6:79:7d:17:21:58:bd:86:85:
e1:9b:b1:e6:25:cb:d7:21:45:b0:62:62:8a:7e:80:7c:1c:e7:
0b:e3:e2:51:78:81:58:71:eb:91:0a:f5:d4:d6:d2:ef:11:3c:
7a:ec:ca:bc:39:b3:4f:86:ef:90:9e:1e:49:58:e9:15:9d:c9:
f8:1b:4f:f8:29:b1:f7:4f:f5:cd:8c:8a:e0:43:5d:20:70:8b:
2a:b6:e5:fa:f2:45:ee:89:9a:63:0b:e7:30:4f:41:b4:e4:22:
c0:d4:c3:9f:ad:b0:05:98:8b:1d:dd:37:4d:ec:0a:49:0d:56:
13:8f:08:0e:f6:d4:25:11:1e:33:74:e2:01:52:9b:08:21:03:
27:4b:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:38 2025 by rpki-client