Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: zmdZkIKX5gtz11IDyAz+npo8zJEYxLsnof502gIwe4I=
Subject key identifier: EE:9A:68:87:DC:C4:C9:47:89:27:09:E8:29:29:62:D4:CC:3F:02:A3
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0198D4731DA2FCF6FE0213CC755889A3FBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 0229
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: FmL7ECcln6PntM58R89wJNazAEa2IMDSDBFS9Y6eWlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1d:a2:fc:f6:fe:02:13:cc:75:58:89:a3:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=ee9a6887dcc4c947892709e8292962d4cc3f02a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:41:5d:7b:67:0f:ef:40:51:92:be:16:a2:
1e:70:be:d9:89:73:cc:df:ac:48:29:07:66:78:77:
d2:5f:80:84:07:ae:56:3b:fb:fe:8a:35:ac:42:83:
7f:c4:72:c4:c8:81:69:26:b5:46:8e:1d:79:54:e1:
b4:f4:a3:52:34:34:ba:bb:87:3a:5d:6e:5e:1b:5b:
d1:7a:96:cf:ba:e1:e4:7d:21:19:26:f8:c7:94:29:
e6:8f:22:e0:51:33:ac:89:b4:71:f5:8b:73:d4:c6:
aa:35:53:1d:28:78:0b:cd:91:7e:95:8d:c1:3e:a9:
af:61:0a:c7:72:7f:21:c0:5b:54:cd:ba:e0:48:60:
26:27:93:cc:79:b7:ec:28:80:6a:77:47:18:ba:d1:
4c:a3:03:83:f0:1c:06:8c:7c:d1:ee:8f:83:df:73:
ce:cb:98:92:d5:77:a2:27:08:5a:20:27:43:5d:01:
35:72:a8:db:40:76:2d:36:c0:d3:f5:a4:23:79:06:
71:69:19:44:b5:59:64:f1:db:d5:52:44:ad:14:1a:
7a:25:a2:e7:14:c1:1f:ca:f1:d6:3c:2a:cf:6e:6a:
89:0f:9d:5e:87:d6:2f:79:81:10:3f:8f:a0:9b:e0:
cc:e6:8e:60:35:00:de:fc:ea:5a:07:57:62:8d:b0:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:68:87:DC:C4:C9:47:89:27:09:E8:29:29:62:D4:CC:3F:02:A3
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:cc:39:0d:a4:88:3d:de:f4:ce:91:9c:ae:c7:e4:0f:34:
42:c2:76:eb:7b:9a:5e:2f:e4:d3:cb:55:ab:7c:3a:dc:0f:c4:
bf:89:ae:34:9b:19:eb:c3:02:c4:47:56:75:5c:2d:a8:33:28:
22:a1:27:da:8d:b9:65:e6:11:1f:68:44:1e:1c:05:2a:ae:97:
18:43:9a:00:fc:64:23:b3:47:8b:43:9b:e0:38:47:64:4b:81:
3f:e1:25:6d:60:2b:87:81:f0:c0:96:4a:6a:3f:ca:78:ec:6b:
c2:39:47:24:ea:ba:ae:d2:a1:ac:28:28:ad:f2:1d:23:e2:94:
b2:b5:45:3f:93:ce:65:12:f9:43:0d:30:6b:31:a2:2f:df:a0:
a2:b9:4a:8d:b1:95:d0:75:6e:ca:98:14:2a:21:18:ac:65:41:
74:a3:55:a8:71:ef:71:4b:14:e0:0d:af:f5:be:8a:f3:89:7c:
05:11:fa:f1:cf:a1:55:22:4e:af:67:07:75:ab:de:97:6f:ff:
e0:2e:04:29:b6:1d:b4:2b:56:3d:0f:ee:38:6c:c0:5f:67:4d:
ae:2e:a1:54:30:bb:23:7a:f5:b0:7a:c6:94:97:73:1e:0d:68:
da:4d:75:4b:a9:bf:3f:92:8a:97:b6:63:bb:00:d5:1e:e7:36:
07:3d:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:06 2025 by rpki-client