Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: ck16tCPdjeQo3SGOQCyHNIAXvK3pNE22Jb2KwijbDfs=
Subject key identifier: B9:17:F3:5E:8C:CA:AE:67:C8:8D:21:D9:77:20:1C:15:3C:D3:86:07
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0198D4E029590A01F69E828D974E3F1B3379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: AkNFSK40bZHtZvgomZ83M/IAHssZvhOygkiveUGdEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:29:59:0a:01:f6:9e:82:8d:97:4e:3f:1b:33:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=b917f35e8ccaae67c88d21d977201c153cd38607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:4d:04:df:8e:4f:1b:71:bd:ab:22:80:4b:
78:ce:cc:e6:2c:bf:cb:89:39:6a:ba:31:90:8f:02:
44:2d:76:3a:98:ed:25:2a:7f:54:6d:6a:4b:31:e3:
3b:1b:71:7d:4d:c6:57:97:75:58:7e:b6:b9:07:d9:
2c:7c:42:d7:b0:97:8e:e4:43:83:1d:8a:b9:49:af:
c5:56:c1:28:b3:33:35:dd:01:ef:e4:85:dd:d6:7e:
49:4f:b7:6b:c9:05:bc:13:23:55:a0:a9:d4:2d:6e:
cd:87:d1:5b:da:e0:db:51:11:2d:69:a5:24:fd:57:
aa:0a:27:ea:22:de:38:8f:ab:09:d3:9e:8c:3c:90:
cb:7a:97:da:db:2b:ef:38:b2:21:9c:f2:30:af:ec:
ef:68:8f:0d:97:16:c0:4d:f6:76:0a:49:63:73:ef:
6f:16:7b:86:10:84:b8:04:a0:91:47:68:6d:4e:bf:
f3:12:2e:37:56:22:65:a2:b9:ee:6d:04:64:9c:49:
53:e5:64:6c:40:53:de:96:17:6b:0b:9b:7b:24:c8:
4b:2c:0f:14:05:98:27:89:1f:c1:4f:46:27:2b:4c:
9d:ad:44:81:6f:89:81:59:72:e6:d1:73:14:58:83:
ac:7b:a9:1d:28:a8:a8:94:77:0d:ce:eb:de:6a:48:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:F3:5E:8C:CA:AE:67:C8:8D:21:D9:77:20:1C:15:3C:D3:86:07
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e3:17:9b:ee:74:c5:4b:03:df:c4:8a:bf:2c:43:78:fb:5c:
db:f1:99:d1:79:ca:50:65:37:71:40:64:59:4b:6f:34:61:63:
85:22:6c:0a:24:db:2f:53:af:af:6e:d1:be:d3:f8:c2:e0:d1:
9e:cb:3d:8a:8b:2f:14:24:18:7a:9d:73:6e:7c:da:d1:54:9a:
dc:db:8c:95:9d:ab:45:f0:2c:1a:61:7d:7e:b1:33:9f:27:89:
f2:f1:05:5e:7b:4d:5d:09:5f:73:be:18:47:9f:d8:a7:56:2d:
3e:9b:10:d1:7f:eb:de:85:61:d2:19:3b:14:e8:3d:a3:27:60:
42:6a:e7:53:ae:3f:18:b7:7c:4a:83:6e:59:40:db:74:7c:62:
66:1a:22:3b:ca:76:4f:7f:24:ef:4e:f5:d6:38:ad:b9:a8:9c:
5b:3b:27:8f:d2:e2:f8:0e:c5:6e:5e:b0:d6:24:ed:9c:5b:3c:
cd:cc:36:16:12:25:f1:06:1e:ea:a9:73:a9:ce:eb:40:f7:a0:
70:ec:c8:d6:ff:5d:76:60:30:b8:49:b4:1d:6b:2e:fa:cb:0a:
dc:a1:a1:f7:2e:51:f7:29:02:6f:8a:a9:0e:b3:2f:c6:7e:e0:
57:be:84:11:bb:d2:63:69:90:1c:80:18:ac:dc:ab:49:2e:82:
7b:6c:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:19 2025 by rpki-client