Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: MUh/6FvdKbMxckD92G3R0nCuX4bG1HdMe8t+QZUtJXQ=
Subject key identifier: 75:58:5F:88:E6:0C:1A:E7:5C:BB:67:61:C4:25:F7:95:26:B9:54:32
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0198D5161610E458C8271D8F348524BB0B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: mDKUDLXjAxmdcirplqV/XemWJtOM62J9H67RugV+Q28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:16:10:e4:58:c8:27:1d:8f:34:85:24:bb:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=75585f88e60c1ae75cbb6761c425f79526b95432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:e3:4a:18:8b:eb:7f:9b:60:f7:2e:76:07:
38:db:13:84:fe:99:45:cd:9f:66:80:f8:b0:ea:72:
fb:bd:bf:c1:c1:3e:49:c0:cf:13:e0:66:32:f9:26:
4f:da:7a:51:f4:ee:bc:85:79:27:6f:10:7b:5d:21:
66:cc:f1:74:b0:c8:e7:85:eb:48:9c:c2:e4:ec:a6:
96:74:bc:2c:3a:72:03:8d:ef:45:7c:42:9f:84:39:
b7:4a:0b:f7:66:d4:f9:bf:64:d9:9b:c4:6e:eb:0b:
77:25:4e:e0:da:2c:32:99:21:3b:8d:bf:6b:cb:0a:
07:9f:dd:5b:48:8d:b8:8c:e5:fa:c9:4c:30:88:86:
3c:f2:a5:34:2c:ce:db:bb:56:06:a9:eb:6a:bd:c8:
54:b8:df:b4:43:80:54:93:3f:42:00:50:5a:6e:20:
cc:15:74:77:a1:ae:d4:d6:dd:c6:02:5c:dd:ca:5b:
d3:c2:68:7e:a6:79:b0:a7:71:2a:f1:aa:d6:2b:45:
59:98:e1:68:49:24:36:cb:56:46:79:10:84:00:a7:
cd:fb:60:03:9a:76:51:93:f7:e7:90:2f:9a:99:72:
22:f1:7c:48:89:b5:24:35:80:c6:eb:f0:95:f1:98:
2d:27:0b:44:48:b8:cf:61:e3:f7:b0:0d:c3:6f:80:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:58:5F:88:E6:0C:1A:E7:5C:BB:67:61:C4:25:F7:95:26:B9:54:32
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f5:82:a6:ee:4a:bc:25:4e:de:09:1a:5c:23:8b:22:74:4c:
b8:72:22:81:87:04:ca:ee:2d:67:4a:f7:e0:da:62:20:bf:f2:
74:b7:14:4a:e6:9e:72:f0:21:7f:f1:ab:7d:5e:64:b2:a6:47:
4b:59:df:36:e1:a2:f0:a9:33:3d:65:b7:85:38:66:3b:67:4c:
26:90:0f:79:a0:03:a2:ac:ad:b6:dc:33:cd:40:bd:66:64:3c:
05:49:a2:fb:9a:fd:a3:11:c4:3c:c5:91:fd:31:97:e5:a8:67:
8a:db:2a:58:4e:e5:6e:54:11:fc:aa:aa:ae:67:52:4e:06:4a:
88:a5:d9:ef:23:a5:42:6a:04:a6:ef:23:21:e6:1d:ee:1d:d7:
ad:f9:8f:37:c1:36:84:6f:b9:9b:9f:d0:72:ba:f5:34:64:cf:
18:7f:8d:59:6a:71:c9:1e:e8:88:77:0a:f5:13:11:f2:12:98:
96:f0:8d:35:2b:8e:1b:59:eb:ec:94:8e:64:c5:c4:fa:82:22:
88:87:93:a5:68:62:04:89:98:5a:24:ab:2f:f1:06:78:68:06:
86:36:b0:5b:73:ed:ed:8f:87:08:1a:35:e7:14:68:b0:80:67:
14:34:be:0b:82:6a:6c:c9:65:89:86:f4:1d:2f:7d:8f:ff:b3:
cc:b8:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:21 2025 by rpki-client