Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: UeFK+pZlKplupmYs9oSvn3Kyr/fqXtOehwlaI6DNst8=
Subject key identifier: 68:B0:8E:35:92:0B:BF:80:D3:03:9F:7C:6B:4C:E4:E8:32:09:03:93
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0198D660E11393B063FDBAA9F317BB3EB69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 051F
Signing time: Sat 23 Aug 2025 10:02:09 +0000
Manifest this update: Sat 23 Aug 2025 10:02:09 +0000
Manifest next update: Sun 24 Aug 2025 10:02:09 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: jDI9MwsEaWTC0DbSpq9PSaYDqbtQN0e9vMZq1B+K/8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e1:13:93:b0:63:fd:ba:a9:f3:17:bb:3e:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Aug 23 10:02:09 2025 GMT
Not After : Aug 24 10:02:09 2025 GMT
Subject: CN=68b08e35920bbf80d3039f7c6b4ce4e832090393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:ea:71:f2:a3:dc:73:ba:30:df:35:36:aa:
44:9b:92:e5:95:a0:5c:db:e7:4a:de:54:be:ed:db:
b0:16:3a:9e:a1:7f:40:66:6e:11:90:67:be:05:e8:
20:f1:2d:e0:ab:db:48:d9:b4:de:dc:a1:eb:88:4d:
ab:ed:c1:30:44:ce:4c:d3:16:df:e8:67:0c:1c:6b:
6f:17:8a:a2:b2:d6:21:8a:c0:22:72:ca:e7:8f:43:
6f:7c:bf:b9:73:fb:93:d6:4b:d6:60:d9:aa:2d:33:
c7:9e:4a:71:27:cb:91:e9:de:64:e9:f8:5d:87:68:
ed:11:5d:f3:45:07:3b:3f:f4:25:b6:da:ba:4a:c2:
3f:2c:b6:39:d0:8b:b2:17:33:70:d5:f2:2e:01:30:
11:97:f0:23:a6:1f:49:04:84:82:65:93:f4:8c:6e:
06:fd:bd:3f:86:fa:b8:bc:36:cf:51:34:47:51:c6:
43:48:55:9b:8a:a6:2f:4a:67:86:f4:c1:af:12:ee:
82:6c:99:bc:a5:18:66:eb:80:f5:06:0f:38:2b:06:
81:41:84:80:55:76:9a:f7:58:e9:b0:78:80:4d:e7:
7f:41:29:64:f2:3b:f3:0e:90:ce:cb:0c:4d:49:69:
2a:19:e1:f9:ae:ab:55:be:f9:ec:68:ce:46:0b:f7:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:8E:35:92:0B:BF:80:D3:03:9F:7C:6B:4C:E4:E8:32:09:03:93
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:44:f1:ed:05:4e:a3:d8:b7:e8:71:04:d4:03:de:dd:8f:
52:c8:c5:d5:98:90:1e:b5:23:cb:81:93:52:e6:e1:36:2f:88:
bc:76:ca:5f:e0:8d:0e:92:67:35:20:f4:c8:96:2d:91:80:8f:
66:2c:b9:80:e3:78:b2:36:39:3a:a4:94:a4:8c:39:eb:29:39:
b2:05:ac:e5:d9:b1:d9:81:f3:2f:27:cd:b0:a7:f7:a7:d5:1e:
45:05:92:17:26:30:b5:1d:fd:fa:c4:ac:1b:ca:68:64:12:c5:
df:76:4d:34:f7:52:38:58:c8:36:0e:11:26:2c:0b:e6:53:5d:
3b:1c:04:40:df:fb:61:22:56:fc:f2:77:be:02:b1:58:bc:23:
e6:38:1c:08:17:58:0f:8c:ec:d9:e5:ca:a0:b8:12:76:c1:76:
ae:75:61:94:56:e7:fd:43:7d:55:65:c2:1c:dc:e5:e0:8d:09:
38:12:9c:5d:00:38:13:04:03:c3:85:88:63:f8:8c:e0:a6:e3:
da:c8:45:a5:5f:a1:d9:ba:61:bf:3e:14:20:d3:4c:a9:6b:03:
bf:88:7a:a3:02:e9:1c:c4:6e:31:be:f8:2f:78:4e:bd:5d:84:
c8:68:90:22:51:f0:13:08:3d:b1:3f:24:24:92:aa:cc:dd:de:
60:22:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:15 2025 by rpki-client