Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 8c/OORWgBJnOZAb2WaIUY1g68Yznwi4t7OD+TUTg7is=
Subject key identifier: C8:C5:FC:2E:B4:5B:1C:FA:3E:8A:FB:69:33:4A:F8:F7:6C:AA:40:9F
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01984852C790EC57DAD5671AA625F8AA480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 07AE
Signing time: Sat 26 Jul 2025 20:00:41 +0000
Manifest this update: Sat 26 Jul 2025 20:00:41 +0000
Manifest next update: Sun 27 Jul 2025 20:00:41 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: CpqV4Zck/ar59qo3L/+xOg3YYZSigymebozD3cGiScc=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:c7:90:ec:57:da:d5:67:1a:a6:25:f8:aa:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jul 26 20:00:41 2025 GMT
Not After : Jul 27 20:00:41 2025 GMT
Subject: CN=c8c5fc2eb45b1cfa3e8afb69334af8f76caa409f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:38:b2:e1:da:04:ac:70:8f:64:a5:97:97:
9b:53:bb:17:c7:b1:6d:31:ca:ef:ca:c2:70:26:80:
9f:7e:86:e5:ef:7e:d4:df:e2:0f:5f:0e:5d:b6:fd:
cd:41:cf:8a:c5:ee:4a:ee:60:78:eb:e2:69:c3:8e:
70:c5:af:79:38:00:e3:95:80:f8:80:39:02:c1:d7:
2f:14:09:ff:53:57:d9:d5:fd:01:a3:0b:8a:18:a1:
7c:21:8a:ab:4d:c1:a0:f0:19:07:55:b4:42:cb:7e:
d5:20:e9:ef:49:14:48:91:a8:74:dd:37:d7:fe:90:
b4:02:1f:14:3e:60:6a:76:6a:1c:a4:7f:1f:e4:a7:
55:57:7e:fb:06:3d:bc:e5:6c:b8:3c:93:67:3b:79:
fa:38:02:86:f9:10:95:9c:96:41:7e:00:df:ca:44:
ed:13:e7:72:25:1a:d7:fb:88:e0:0b:b7:ec:f6:e7:
46:20:5a:2c:e6:40:8d:62:ea:51:33:d4:14:dd:85:
44:cc:26:d3:ba:3d:61:6f:a2:9f:c6:2d:f1:ed:1f:
cf:9f:7f:94:8a:70:d7:16:1b:24:1f:23:0a:28:38:
ab:84:a9:44:74:f1:6c:8c:dc:a7:97:51:ca:bc:b3:
3c:c6:11:43:12:b7:8e:33:24:2b:69:10:b9:34:40:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:FC:2E:B4:5B:1C:FA:3E:8A:FB:69:33:4A:F8:F7:6C:AA:40:9F
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:70:1f:4e:9e:8c:91:2f:bd:25:79:ed:77:f6:d6:b3:94:
04:d2:2a:d3:78:17:6e:5c:c8:72:60:77:19:16:c0:ec:a6:bf:
4d:82:07:35:5d:a2:b6:96:88:fa:57:3f:82:f9:88:33:68:36:
49:b3:68:b9:c7:db:9e:b1:37:83:31:27:d7:04:03:6f:3a:c2:
f4:1e:32:c5:5b:ef:83:d9:ed:61:8b:9f:39:51:63:9f:46:bf:
8e:2e:a5:86:93:18:2a:1f:b7:20:53:8c:0b:a7:78:d5:8a:8a:
a9:11:71:6c:7b:5a:5b:2e:0b:cf:69:25:cf:3c:5c:43:6c:3f:
db:2d:26:d1:01:48:d7:26:30:db:7b:fc:6e:3a:df:5a:96:c7:
34:97:8b:01:da:fb:e4:40:2d:df:87:7b:02:4d:43:a9:d3:d8:
d1:9e:df:c9:3d:8b:f7:11:c3:d8:8f:f6:61:b2:55:21:de:98:
f4:d7:e7:c8:e3:c4:c6:1a:f0:de:53:eb:10:ff:f8:59:3c:e3:
bc:a1:7a:e2:c7:b0:c8:32:84:96:c4:55:a1:83:c9:d4:94:e8:
d0:2d:8b:b1:c9:c4:f6:8d:6f:1a:db:ba:cc:0f:fd:b2:87:d6:
e1:27:5d:b0:1a:db:4f:9c:df:ce:7e:4c:18:2e:7a:4a:9e:f5:
5e:76:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:43 2025 by rpki-client