Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: kzH/E1JZubgPw5jZUC7zs7GE2zHg6+dn9wt+/wl9BS4=
Subject key identifier: 0A:43:B0:6F:B0:78:FD:E8:91:10:96:DB:C0:17:6F:73:DA:7A:49:C7
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0198D7731C478655C1A711E74168A08CC175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0600
Signing time: Sat 23 Aug 2025 15:01:41 +0000
Manifest this update: Sat 23 Aug 2025 15:01:41 +0000
Manifest next update: Sun 24 Aug 2025 15:01:41 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: hhPuDgeU5L3nFASqeAA625i37TPRoALNgg2Wguvv1dw=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:1c:47:86:55:c1:a7:11:e7:41:68:a0:8c:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Aug 23 15:01:41 2025 GMT
Not After : Aug 24 15:01:41 2025 GMT
Subject: CN=0a43b06fb078fde8911096dbc0176f73da7a49c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:27:dd:82:3f:8c:2f:04:09:18:a3:c1:64:
08:58:ec:3e:b3:a9:6c:2b:93:28:50:38:56:1a:0f:
28:1e:61:b5:12:cb:3f:81:ad:a5:a1:e7:5d:cb:b0:
1a:30:e7:4f:66:43:03:51:cd:87:70:de:dd:a0:f6:
3f:16:09:1d:b6:d7:6f:35:15:ca:6f:6c:e6:ba:22:
c9:5c:d7:93:3a:f6:68:fe:c8:59:57:dd:3a:89:c9:
c3:dd:93:ba:41:e2:5c:6e:b4:c1:d5:c0:35:de:29:
75:ce:68:58:00:9d:3e:0f:c9:d2:be:ee:b8:30:82:
63:2a:4e:fb:20:d9:47:17:5d:e0:fc:b0:00:dd:88:
a4:be:a0:49:93:e7:4b:48:5c:bf:f3:30:8a:b1:52:
4d:57:34:08:77:97:da:08:67:a1:a0:98:db:f1:75:
89:52:18:50:b6:8f:6d:9b:d2:19:08:ff:73:8d:5d:
c0:0e:75:12:08:41:d4:a7:7a:23:cc:b6:d9:37:9f:
29:bd:a6:39:f4:f2:71:bc:4a:b5:47:b7:5e:32:9e:
4f:c8:5c:e1:ae:b8:f7:d1:37:f6:1c:39:49:4d:eb:
29:0d:c6:30:26:0d:a0:7a:9f:74:65:00:24:95:2f:
ed:8a:b2:5f:bb:97:1b:d5:bb:d1:7a:6b:c5:a8:d4:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:B0:6F:B0:78:FD:E8:91:10:96:DB:C0:17:6F:73:DA:7A:49:C7
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:45:7b:cf:3c:3e:77:66:5b:13:22:06:a1:52:7d:07:c4:f7:
4f:6d:f1:55:5b:b3:fb:eb:5c:f0:ef:23:ae:2d:ec:45:c9:f1:
5f:62:2a:81:c2:99:3e:bc:c3:75:9a:09:18:cb:7f:6f:9f:89:
74:6e:16:2b:ad:14:09:8b:48:34:ca:78:de:09:e8:33:ee:8e:
ad:09:d5:07:fe:b7:73:db:bf:ad:88:fc:af:f8:eb:48:e2:30:
58:87:b8:6c:bd:cc:ba:b5:22:69:83:b2:f4:26:df:78:e2:34:
db:44:f6:f9:ab:ce:e2:15:98:d0:75:18:b5:09:cd:bf:33:67:
b7:6d:4c:c4:05:a9:23:bb:a6:13:5f:bc:25:aa:cc:cb:35:ed:
48:d3:bc:f6:ac:c6:e7:15:0f:bb:70:86:9e:fd:1a:54:27:a5:
b1:92:f4:cb:40:fd:73:9b:6b:cd:bd:11:8e:df:b0:2c:b6:b7:
ee:cf:b2:0b:90:30:ee:3d:af:de:2e:54:99:f7:c6:9b:34:5c:
34:0b:bf:aa:c2:54:77:92:06:61:a9:69:35:de:d1:08:d3:23:
96:1f:39:0b:98:fb:fd:c5:91:78:8e:4e:e6:45:d4:49:f0:1a:
c2:9a:70:18:8f:e3:a7:72:4c:a7:00:57:df:ad:24:9d:70:af:
41:71:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:28 2025 by rpki-client