Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: sUom5tH/kHgizi3TnrmlshL4QaRX0yttwYJQEfb4T8Q=
Subject key identifier: 96:80:E9:12:2B:ED:7E:90:67:35:A6:2C:59:D1:1B:65:B5:07:F8:52
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019849653CC4391931ED11E06FA9CDEC8730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1411
Signing time: Sun 27 Jul 2025 01:00:28 +0000
Manifest this update: Sun 27 Jul 2025 01:00:28 +0000
Manifest next update: Mon 28 Jul 2025 01:00:28 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: 6a5NJX1mhtDLpxxx/Obc0O6MphG4pxf7GP2PEgAJaOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3c:c4:39:19:31:ed:11:e0:6f:a9:cd:ec:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jul 27 01:00:28 2025 GMT
Not After : Jul 28 01:00:28 2025 GMT
Subject: CN=9680e9122bed7e906735a62c59d11b65b507f852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:46:ce:ec:66:76:9a:4b:59:ae:8a:68:14:
f9:20:05:83:7d:6e:5a:76:23:f8:6a:c0:89:cd:90:
65:0f:74:f7:da:7e:3e:5b:ff:53:9c:c7:09:5c:6f:
90:7b:89:01:35:ee:c0:f2:4f:b0:1a:ec:a1:f5:37:
9d:8f:ee:4b:71:96:94:6d:94:5a:c1:78:c6:4a:60:
d7:01:4b:1e:f0:9d:c2:f9:df:56:ed:7b:17:d4:48:
0d:ff:97:05:ef:99:3a:8c:56:57:13:96:32:96:6f:
c2:84:79:de:1a:86:5b:5d:66:48:d2:31:38:2e:51:
7b:f3:e3:a3:79:77:9b:ef:cf:42:32:96:1b:d4:55:
07:79:9a:31:11:ba:91:86:ea:da:a6:b7:4d:56:a8:
41:e0:ee:b2:61:ec:a6:e3:e1:c0:0e:1f:20:b2:84:
e6:d8:b3:40:8e:8f:d9:fa:09:f2:eb:37:ac:54:c6:
ba:76:18:26:86:5a:fd:89:00:fa:b0:c7:bb:6f:f4:
ae:da:e2:30:36:20:ef:8d:3c:9e:f9:7d:eb:bb:66:
32:e2:5b:61:3a:3a:64:13:a9:bf:35:e5:2e:87:5a:
a4:0b:75:f2:53:98:96:1a:cd:0e:d4:1d:e3:23:35:
b2:62:64:1b:24:95:06:f2:6b:f7:77:1f:8a:61:2f:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:E9:12:2B:ED:7E:90:67:35:A6:2C:59:D1:1B:65:B5:07:F8:52
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e0:b5:a6:3b:a7:77:89:4d:0e:ae:39:2a:4b:8f:ba:b3:70:
16:ed:cd:18:f6:03:be:89:cd:92:c0:1d:0b:07:c0:a9:e8:0f:
76:1d:1e:6e:3c:17:ab:90:27:71:57:67:24:c2:3f:0c:9e:ff:
c2:03:ed:44:38:c0:78:60:1f:fb:b1:ca:b8:16:7a:e9:e9:25:
9c:7e:ee:2f:1d:d4:c5:87:c9:4d:fb:c7:b4:be:5d:94:77:b3:
80:c3:25:83:c1:06:77:bd:38:ed:0c:d6:97:50:f9:15:d0:cc:
d9:21:ea:01:97:c0:8c:84:df:1c:1e:1a:24:86:65:5e:e5:00:
30:b9:69:63:26:c2:74:a0:d9:f6:69:e1:5c:4b:e8:bd:50:40:
0c:3a:f8:11:be:07:97:f2:e2:7e:42:23:f2:e4:97:30:cd:3e:
d3:02:c5:db:ee:5b:93:08:17:8f:56:b2:8e:a9:e9:1d:27:dc:
69:fe:c6:85:2f:f8:32:2d:da:e8:41:27:26:c3:ad:5a:1c:64:
d6:62:7f:d6:6d:ed:64:86:47:95:14:f1:5e:b7:9c:79:85:ec:
4d:52:5e:a9:6f:ee:69:67:6a:8c:b3:21:9e:75:4c:13:f7:dd:
b3:3b:8f:e5:1f:d3:5d:c9:b1:f6:cb:78:99:a8:2a:af:41:3c:
d7:70:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:21 2025 by rpki-client