Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: ywO2Cqt4izmcR5P+vqCZpjSTajE501gXTLeAahgh3h8=
Subject key identifier: F3:72:88:5A:C9:2C:62:CF:51:C8:D9:C8:C0:0B:40:4C:E1:00:8B:79
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0198443EAEC66608948EF605D71978FEDE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 13BF
Signing time: Sat 26 Jul 2025 01:00:15 +0000
Manifest this update: Sat 26 Jul 2025 01:00:15 +0000
Manifest next update: Sun 27 Jul 2025 01:00:15 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: F/j8yEpt3fmv/e3/3SJkMOJjjAqQ+X3bPBMuDbohfgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:ae:c6:66:08:94:8e:f6:05:d7:19:78:fe:de:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Jul 26 01:00:15 2025 GMT
Not After : Jul 27 01:00:15 2025 GMT
Subject: CN=f372885ac92c62cf51c8d9c8c00b404ce1008b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:17:d0:02:85:cb:e4:5e:6d:54:37:cf:8e:
79:5a:91:46:75:81:cb:72:39:30:af:1e:1b:44:c5:
fd:57:5b:11:cc:43:9e:79:ac:29:13:07:92:b6:0a:
f3:f7:08:96:36:37:be:68:45:53:77:05:c1:00:88:
1a:d1:b1:6a:e5:7e:a7:e9:9d:ce:5b:ac:cf:f5:6d:
e0:a1:41:77:6f:65:84:56:4f:81:e3:f3:19:9e:cd:
86:00:ef:5b:73:5d:28:10:7d:2b:fb:1f:02:cf:47:
07:24:c6:f1:22:67:3f:b2:7a:5e:84:20:e6:43:23:
2f:4e:ab:d9:7d:9b:f0:0f:9e:ad:be:f6:e6:c1:e5:
b5:6f:36:14:e5:cd:b1:31:b4:70:9a:5d:24:97:f5:
56:2a:1c:6d:00:27:df:23:fc:ac:a9:0b:99:ad:53:
e5:23:e9:79:c6:9e:a4:31:a9:5e:af:12:5f:dc:7a:
9d:45:ea:4f:02:71:7f:50:cf:92:ec:02:18:78:18:
e2:a8:0a:68:d1:93:a5:3b:8a:1e:2f:95:37:97:f0:
f9:ee:d7:6a:45:e4:8a:8f:81:c7:24:8d:42:6c:51:
95:b6:87:e1:c0:55:7e:8a:30:7b:f8:2c:c2:74:6d:
00:6d:35:21:a1:37:54:e1:20:77:21:6d:76:ce:1d:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:88:5A:C9:2C:62:CF:51:C8:D9:C8:C0:0B:40:4C:E1:00:8B:79
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:48:e7:c3:2d:ae:76:28:6b:a6:49:1e:6b:c3:b3:0a:50:af:
b6:34:e7:b5:8f:3c:22:37:82:14:aa:5a:25:63:bd:14:65:d5:
83:9f:65:d0:86:6d:f4:8b:83:d2:42:1d:6e:87:70:9f:38:df:
ab:d5:46:ed:5a:6c:0e:7a:f7:8a:28:66:35:13:8e:9d:0f:61:
f8:a9:16:2c:9b:5d:ac:f4:e4:2a:fe:dd:16:73:d6:d0:9d:8b:
9b:65:e8:5e:7a:88:ac:df:cd:6e:b5:9f:26:16:19:80:27:45:
8f:c3:5c:63:0e:97:57:b6:b5:c6:0e:2c:52:d8:d7:db:82:49:
aa:b9:4a:c6:8d:26:c3:04:7e:c8:97:39:ef:19:37:b3:06:eb:
ca:7e:16:5f:38:c1:8d:77:e8:60:18:61:c1:76:b3:ee:e8:80:
be:7a:49:1e:e4:78:39:f2:ea:f2:67:4f:15:a3:98:a8:06:7e:
62:ac:ae:a1:23:3c:84:fe:0d:47:9b:17:c7:ee:19:56:f8:3b:
ef:5d:25:d2:c5:96:01:bd:10:84:9a:fb:d8:30:88:e6:d6:00:
3f:83:d4:08:70:ac:f5:df:e1:4d:72:76:ab:e2:1c:ce:db:f2:
0f:42:3b:22:e0:9e:2e:e6:da:73:0c:33:41:9b:fc:27:27:de:
c7:ce:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:59:11 2025 by rpki-client