Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 1e26lCiCjYUEYety13T1N8MJrawjaBCEJWFEyBHZSdE=
Subject key identifier: C0:64:CE:C8:42:D8:7D:B2:54:23:57:77:69:B8:A1:A5:92:09:49:1C
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0198D5BC4458A34E5B38FA746A92FACFB762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: 0QCYH3O+RXBOy3J0XGGOjEWz7twRLzBGjuEDQo/6JiU=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:44:58:a3:4e:5b:38:fa:74:6a:92:fa:cf:b7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=c064cec842d87db25423577769b8a1a59209491c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:17:73:e1:cd:ba:f1:02:3b:a6:b3:83:4b:
93:1b:65:bd:58:dc:bb:0c:e8:7e:ca:9f:92:9e:e8:
58:04:9d:5e:b1:21:61:00:45:52:82:91:91:2e:40:
ae:9b:7f:74:99:6f:7e:0d:dc:e9:14:6f:1e:17:77:
21:38:48:20:a8:ae:e8:7c:29:50:39:6d:50:e1:98:
e1:7e:7f:16:e9:77:ca:0d:73:86:b8:24:37:c7:54:
9d:e3:6c:c2:e5:62:ed:d4:93:f2:aa:35:15:7e:49:
92:3c:70:18:0d:09:3b:d3:81:3b:e1:17:63:68:2a:
ff:74:ef:bc:fb:f7:9a:66:b8:00:eb:ea:d3:35:4e:
a3:de:68:33:13:b0:86:4e:cd:76:ca:b1:02:bb:88:
29:11:a1:88:2d:a2:68:98:f5:42:6d:e2:c7:cd:b5:
f6:55:64:37:1c:00:04:23:f9:6c:31:21:9b:b1:25:
ac:35:3d:bd:80:58:79:ca:b6:34:56:86:a2:76:d0:
5a:09:5a:33:00:b9:2f:86:38:8c:56:ad:03:1c:a6:
0b:c6:d6:f9:50:29:ee:4a:cb:77:d3:79:a2:7b:3f:
e9:0e:7c:5f:87:fc:af:aa:b2:90:bf:52:5b:bb:27:
de:98:4f:6f:8b:a7:fd:b5:bc:a7:81:06:90:fd:f1:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:CE:C8:42:D8:7D:B2:54:23:57:77:69:B8:A1:A5:92:09:49:1C
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1b:bd:bb:d1:08:e7:24:88:13:21:eb:f1:c9:6a:f0:cf:9b:
3a:4c:5e:b5:d1:f2:71:da:1a:d5:34:cb:38:f0:21:b6:e2:ce:
bc:48:2b:01:21:03:c1:4c:e9:ba:37:33:51:aa:75:29:20:6f:
78:ca:ca:b5:a5:89:2b:c1:ad:67:33:8a:78:e0:cd:9c:34:82:
7d:10:31:a9:e8:0d:36:72:05:98:41:46:55:8a:4b:01:51:8a:
be:90:99:36:af:4e:a5:b0:a3:b7:fc:9d:67:71:d2:f4:97:ac:
f4:2a:60:4f:14:ad:cc:03:a7:70:cf:94:16:77:57:06:61:53:
39:1e:ad:91:0b:43:66:a6:3e:3f:9c:53:56:0c:28:02:c1:31:
af:c0:ca:f5:bb:1f:66:24:0c:14:00:64:d1:90:47:e4:b4:bd:
73:4a:37:18:13:ca:e1:fc:4d:97:48:4e:1d:1f:10:10:6b:0c:
6c:ef:2e:92:cb:9c:c2:7f:70:63:37:56:89:01:b3:7b:5c:b4:
7d:ee:e1:bd:57:fb:93:57:59:aa:51:a1:95:45:e4:a8:4a:64:
fb:ca:1a:55:1f:5f:0b:4c:d3:0d:45:93:14:f7:1c:12:fa:b5:
15:76:53:a4:e3:02:b8:c2:50:72:76:d5:e7:c8:20:8e:e0:df:
19:f4:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:26 2025 by rpki-client