Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: sQacVX3WFVLkB5kUmGznnZrqCjXmTrQGq8YYAUqa9LE=
Subject key identifier: 83:E8:5A:17:52:2A:DF:4E:5A:8C:D0:1F:BE:E6:89:18:0F:99:B2:47
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 01985457108F4C719F4ED8388A483F6B7381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0B02
Signing time: Tue 29 Jul 2025 04:00:48 +0000
Manifest this update: Tue 29 Jul 2025 04:00:48 +0000
Manifest next update: Wed 30 Jul 2025 04:00:48 +0000
Files and hashes: 1: eElEamJRXa34pPUYDX_wsosnFjg.roa (hash: A2iUP3CvC18fDfjURHdEPTZmoR2njRzEuhMxjf7TGDQ=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: 59erEd3Sufclc5ekAw/gbHz+I0kiRjZgvgTKj/HqRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:10:8f:4c:71:9f:4e:d8:38:8a:48:3f:6b:73:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jul 29 04:00:48 2025 GMT
Not After : Jul 30 04:00:48 2025 GMT
Subject: CN=83e85a17522adf4e5a8cd01fbee689180f99b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:1a:45:57:ca:b5:2a:6c:f5:b0:e5:af:18:
3f:05:40:63:19:14:55:ca:03:3b:9f:42:5c:61:59:
7b:12:19:29:97:d2:5f:44:fe:97:26:40:e9:ae:ab:
f9:9b:7d:ff:e6:96:8c:53:1e:f7:03:e5:03:52:4b:
10:30:9e:cd:ae:f7:5e:8b:5b:24:04:ae:2b:51:2a:
49:37:ff:28:e2:41:c2:5f:2f:50:e7:71:18:63:4a:
03:e2:53:a5:fc:ae:67:60:bd:0d:8e:19:98:87:bd:
d1:75:40:57:b0:1f:e7:42:ad:b7:a8:ac:2b:b2:b7:
b0:6b:0d:b1:97:39:6a:1c:71:90:d9:77:1d:e5:4d:
08:8a:56:aa:8f:06:4d:e2:af:85:2f:a4:08:ab:8d:
42:9f:7b:f8:58:6f:b9:59:ea:7b:5c:a2:b2:cf:5e:
24:0e:ee:de:89:6a:61:dc:eb:f9:8d:63:a3:16:8d:
08:4f:26:48:b5:f2:e2:38:c4:01:18:55:e8:c7:2b:
1c:99:f8:17:8f:61:5e:82:d7:b4:4e:82:29:c8:dc:
62:e2:56:75:7c:b0:06:d7:a6:85:5e:9a:07:84:ac:
d2:4f:1e:52:78:e8:cb:d5:42:23:ea:35:4c:38:5e:
43:9d:11:9c:70:e1:83:d9:68:54:f9:a1:30:37:d2:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:5A:17:52:2A:DF:4E:5A:8C:D0:1F:BE:E6:89:18:0F:99:B2:47
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bf:be:eb:b2:5b:20:95:39:4c:f5:b0:c1:24:e6:b3:68:3b:
9c:73:05:ba:56:71:85:65:32:ee:db:8c:82:f2:35:72:36:d6:
aa:cc:fc:92:be:c5:55:82:e9:73:59:15:47:70:a6:c1:4a:b0:
5d:e1:eb:7c:92:0f:37:9a:8b:e4:ec:f0:59:aa:1f:fb:fd:9f:
2c:1d:32:e7:32:fa:9b:c1:65:fb:93:65:30:e0:ac:5f:0e:73:
fa:fc:1c:fa:b0:52:2e:87:62:5b:ae:11:80:2e:a0:64:f4:ee:
bd:60:1c:00:14:9a:77:90:80:3c:eb:06:98:c9:26:6d:a0:35:
d4:ff:ff:46:f1:7c:0b:f2:42:d5:eb:b7:3c:72:e4:78:92:64:
63:d7:58:d5:d6:b9:d6:7b:5c:78:52:8f:f5:46:25:60:17:3f:
79:b2:c9:54:6c:0c:e4:ab:a2:4e:5c:e9:3c:55:2d:be:cd:89:
a9:32:62:00:5f:50:2e:c0:3e:ff:4b:4e:14:cb:c8:2b:6b:0c:
d9:7e:6d:b7:c2:12:f2:9d:bf:a0:d1:23:50:2a:00:8a:ee:19:
91:47:c7:99:75:6c:0d:16:c3:f0:97:36:ce:54:1e:74:ed:4e:
d7:8c:f2:8b:30:ea:86:7c:96:97:5d:99:96:be:91:bb:4b:49:
ee:8d:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 13:35:21 2025 by rpki-client