Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
File: l2aFR6QzND3em7NllbyQO08UlgQ.mft (raw, json)
Hash identifier: MbOknTQbBdZabWDuTFhcOAXGMeciy+78aqhh+gnZMlQ=
Subject key identifier: 47:B8:B8:C8:FB:D4:64:7E:7E:CC:FC:DE:F4:48:E7:62:22:0F:71:8D
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Certificate issuer: /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial: 01984A4126D712BD6C278D0894BDA87531CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 05:00:40 +0000
Manifest this update: Sun 27 Jul 2025 05:00:40 +0000
Manifest next update: Mon 28 Jul 2025 05:00:40 +0000
Files and hashes: 1: 4iS4euTiQtItVR9HBATrZ2d1jzs.roa (hash: Nz/wJMhE4IZvQI592qdr0LdN9YN/43igAFLk6lhCh5w=)
2: l2aFR6QzND3em7NllbyQO08UlgQ.crl (hash: or1Gp1BKO3QobeC84qYNPshii6EPjkpK34UZ3AYxwU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:26:d7:12:bd:6c:27:8d:08:94:bd:a8:75:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
Validity
Not Before: Jul 27 05:00:40 2025 GMT
Not After : Jul 28 05:00:40 2025 GMT
Subject: CN=47b8b8c8fbd4647e7eccfcdef448e762220f718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:d5:5b:b1:9f:3d:c6:b7:8d:e3:cb:99:bf:
e4:a3:60:27:c1:9e:13:9e:58:99:17:57:fa:53:b7:
d6:6e:62:2f:b1:50:3e:75:40:72:c2:b6:a9:73:d9:
66:a2:ba:47:61:9e:7b:57:19:de:6f:73:08:7e:46:
99:a0:36:35:eb:9e:f0:2d:34:ab:34:a1:5d:4e:6e:
98:e5:b3:bd:70:a4:00:55:4c:a9:81:d7:ee:67:34:
2b:32:f3:4c:4d:27:1f:33:ce:b5:ec:29:e6:e4:a4:
5e:a7:c5:5f:a3:39:b1:be:38:ff:9d:e1:bb:38:2f:
ba:e1:af:4c:1a:12:a1:10:37:d6:41:91:69:05:53:
a6:cb:bc:14:b7:8e:c5:e0:ba:20:1f:73:60:13:eb:
31:81:df:d1:fe:30:c5:c0:34:82:55:96:2e:fe:6d:
89:01:f3:09:70:62:be:68:cf:7b:fd:16:d7:95:62:
1e:83:45:77:6e:d1:66:af:e8:9e:7d:28:15:57:37:
2d:7c:b3:2f:25:83:59:87:85:b4:8e:8e:d3:06:09:
93:1e:d2:eb:f5:a5:9f:62:3b:c2:6d:62:be:db:fb:
4b:41:2f:c7:b5:59:51:16:20:51:81:af:e2:2f:74:
16:c9:31:1c:23:e7:c1:a1:7b:42:71:af:da:90:1d:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:B8:C8:FB:D4:64:7E:7E:CC:FC:DE:F4:48:E7:62:22:0F:71:8D
X509v3 Authority Key Identifier:
keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:01:c0:e1:c7:50:c9:4c:91:e6:c2:0b:cb:78:5d:16:b4:38:
57:0e:d6:48:92:e7:6e:35:16:2f:f7:56:64:8d:ac:d4:eb:6f:
e9:e2:d5:b2:c1:e1:d8:ed:dc:d8:df:9b:df:0b:ee:4b:79:05:
de:43:f3:75:25:31:1c:bc:ae:e6:c1:1b:11:4f:7c:ee:8e:eb:
74:fb:7e:a2:2c:ef:1b:7c:aa:b0:20:90:fd:18:dc:b0:95:51:
a8:f0:c5:c3:14:32:c2:1c:df:e1:b6:fc:60:b3:94:ac:02:84:
60:3e:78:bc:55:32:db:0d:11:b7:14:0a:f9:44:16:c3:a6:e2:
a9:b5:1a:91:e4:a1:0f:28:f3:93:1d:02:17:a8:35:7f:8d:a3:
ac:eb:6d:fc:0d:78:a9:24:7c:2b:0c:d4:14:e6:93:d6:50:bd:
fc:23:45:64:4f:c7:3d:ad:9a:e7:23:d9:01:18:da:86:e3:5f:
fc:94:8d:1d:9a:90:67:05:8f:65:c7:d3:a6:1a:f7:06:53:e2:
57:52:98:b2:f0:89:3c:db:6e:ee:4b:7b:01:bc:61:ba:b0:b7:
e5:09:c9:bd:02:b4:e8:72:0c:57:f3:a3:e3:01:21:0a:0d:96:
33:e0:0b:0c:e3:72:80:22:ef:5d:5d:40:44:c3:85:24:aa:29:
5e:ea:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:30 2025 by rpki-client