Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: 9WCf86/oDDabs51h9z1sx4epzZdnWeaD/k4w0tu4LRA=
Subject key identifier: 4C:64:E2:CF:AE:CB:30:B4:24:4D:A7:2F:49:4A:39:67:DC:9E:C6:B0
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 0198D515D89BBB0150946107C6642B9BF1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 084C
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: weRcgvndxpsO6bVye8rEd3zY4ZRBnGdxqs1mUP5uRQY=)
3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d8:9b:bb:01:50:94:61:07:c6:64:2b:9b:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=4c64e2cfaecb30b4244da72f494a3967dc9ec6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:3e:57:cf:31:bd:b6:9f:a2:81:d4:c9:09:
2b:4f:4b:f3:73:4a:06:ca:b5:e9:bc:83:c7:fa:a1:
45:63:5f:c8:74:45:f9:bc:84:87:c1:3c:69:b6:00:
07:74:db:db:15:e7:91:5b:d9:27:fc:a0:e9:af:c2:
80:be:e3:a0:a2:20:9b:1c:20:24:06:1a:45:21:13:
17:fd:da:b4:df:1e:8f:99:21:97:f7:e5:9b:bd:6c:
b4:0f:37:72:8e:5f:3f:4f:2d:ea:3d:ac:55:2e:7f:
c4:80:1e:42:d5:87:4d:eb:a6:14:16:3c:ed:01:4b:
c2:5f:d5:74:3c:af:b6:bf:bd:d1:de:f9:43:ed:dc:
96:40:ad:76:43:d1:2d:c9:70:c7:53:c2:25:b6:f2:
4f:b3:5b:58:a9:a9:74:54:1a:b8:12:81:40:ca:59:
c9:95:19:f1:93:f3:8f:a5:64:3b:d2:06:5c:aa:62:
b2:4f:90:cc:ba:98:95:92:3f:cb:0b:27:f0:66:33:
ab:f8:e0:21:44:51:d5:86:78:d8:c0:37:4e:3e:43:
10:4e:33:e6:00:98:69:c1:2b:e2:63:b3:f4:03:96:
6e:78:3e:78:9e:8a:a4:3c:0f:45:a5:80:c9:b4:2d:
fb:91:85:31:ab:27:bd:3d:1d:95:7c:80:06:58:a2:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:E2:CF:AE:CB:30:B4:24:4D:A7:2F:49:4A:39:67:DC:9E:C6:B0
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:0c:65:e1:2b:27:33:69:04:b3:91:92:b1:99:2f:c5:46:
d9:da:3a:df:9d:b6:c5:e7:87:68:65:36:e8:fd:97:a7:d9:78:
87:49:8b:0a:e5:af:6e:40:7a:36:c3:25:5a:55:07:50:42:d7:
31:8e:e1:09:97:8e:cf:3e:c6:ff:1f:42:7d:78:b4:78:c6:27:
53:47:71:11:d5:88:39:db:e3:74:d2:f4:97:2c:9d:4d:fc:57:
13:02:16:5e:99:c0:13:c4:cb:1a:dd:96:e5:09:0b:5e:3c:37:
f3:ec:19:93:21:b5:76:8d:81:89:ac:05:39:e2:fe:16:3c:d7:
ea:22:42:99:a8:b7:d0:47:20:6b:0a:ae:30:90:f2:ff:e2:a3:
aa:61:ad:47:d1:f0:c0:77:8f:d1:c2:cf:bf:8a:dc:e9:1e:74:
5d:4f:43:d5:56:82:58:e8:40:ed:26:53:f8:64:23:16:2c:dd:
37:00:51:a7:d6:c7:e6:58:91:fc:c0:87:a0:1c:3b:1b:48:ae:
d3:e5:37:9a:2c:65:44:9f:da:d1:83:22:45:01:c9:a2:6e:a6:
ce:78:65:6c:ad:86:03:7a:21:02:d7:27:6c:96:59:27:0f:9a:
ff:a7:70:e1:1a:f8:73:67:c2:32:51:c8:2d:bb:2a:b3:1e:f1:
c6:f1:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:12 2025 by rpki-client