Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: 0cuyJL5pc4XrYwmA4ziLh+CqM11M3ICzDU2xkqlu1RQ=
Subject key identifier: FF:7E:F5:6F:DE:95:77:EF:E4:A7:0D:8B:10:69:15:58:BE:05:F3:C6
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 019847E5652DE8195C2FB0603952CFCEA589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 0FFB
Signing time: Sat 26 Jul 2025 18:01:12 +0000
Manifest this update: Sat 26 Jul 2025 18:01:12 +0000
Manifest next update: Sun 27 Jul 2025 18:01:12 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: hpTlo4N5G2I95K5QLO3oCVfjpQMd8HuXLTreZ6x1gLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:65:2d:e8:19:5c:2f:b0:60:39:52:cf:ce:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Jul 26 18:01:12 2025 GMT
Not After : Jul 27 18:01:12 2025 GMT
Subject: CN=ff7ef56fde9577efe4a70d8b10691558be05f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:55:5a:1c:d9:59:7a:04:ea:3e:ac:56:c6:
00:17:7a:ba:61:7e:9d:3b:6b:08:6b:1c:ee:6b:a6:
e4:23:9d:47:6b:d8:12:9c:e0:cd:21:21:54:93:96:
a3:8f:c8:70:01:d9:26:ad:f4:87:eb:c0:d2:e2:f6:
50:22:2a:65:4a:f2:20:ff:51:a7:19:82:95:9f:64:
7f:43:22:59:d9:b9:7a:39:0f:94:1c:71:c5:fe:a6:
01:f9:50:a5:ac:c5:70:a5:f2:7f:5b:ae:da:bc:68:
cb:26:15:d3:c8:06:42:87:42:b2:35:67:c2:81:7e:
e4:8e:1b:be:05:89:62:0c:7c:81:85:7e:f2:2d:da:
43:5f:20:67:50:77:e0:f2:34:98:9b:a2:02:a0:73:
d6:30:64:55:20:a9:cf:9e:e9:7d:00:04:80:67:8f:
21:10:b9:7d:7b:1b:09:ee:21:8f:59:02:39:7a:dc:
54:d8:e7:68:73:4c:bc:ea:74:68:a7:23:ed:f9:b1:
80:26:74:6f:86:47:b3:9d:57:d7:55:85:60:26:4c:
13:32:35:7e:91:2d:8f:b4:b2:29:2e:0b:0b:80:74:
ca:a7:39:49:6e:c3:65:66:90:8f:56:2a:a2:39:41:
6e:e3:37:63:5a:24:2f:1e:9e:b6:73:ba:c5:ed:04:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:F5:6F:DE:95:77:EF:E4:A7:0D:8B:10:69:15:58:BE:05:F3:C6
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:9e:e5:04:1b:14:e9:e9:91:e2:6b:c5:9a:ab:d6:b4:41:
47:7e:e3:4f:51:80:32:70:40:37:7a:83:92:43:ce:ce:12:02:
ec:77:96:62:5d:44:62:65:b5:ca:b3:9c:56:8d:fc:b9:80:d7:
60:cd:10:07:af:ae:0d:07:7a:9c:55:5c:55:07:ee:5b:24:8d:
69:a6:66:4d:e2:12:03:78:24:db:e6:8a:48:0d:92:28:61:03:
c4:f2:49:c9:64:38:9b:a6:f0:92:92:4d:3d:84:da:3e:8a:ad:
4c:40:f0:5b:22:e3:93:7e:85:4f:75:ba:69:a5:37:e9:8d:bb:
ff:7e:b2:52:a6:c9:5b:78:28:53:f5:e2:52:65:4d:1f:5d:be:
10:f2:bf:26:d9:9a:1c:3c:d5:43:38:97:af:35:bc:03:0d:90:
63:42:e7:50:97:fa:f8:a0:06:8f:9b:d8:ba:35:80:4f:82:cd:
53:12:77:72:5a:20:67:2d:8b:cd:66:35:f4:a2:38:5c:23:3e:
d9:80:53:a6:6e:6b:1e:e8:73:e1:10:a3:79:d4:57:66:a2:42:
f4:c1:61:a0:e7:1c:4e:b9:1c:62:c5:7d:23:fa:fe:bd:2c:27:
48:eb:f1:e7:86:ae:51:cd:4d:f1:04:09:db:0a:8f:ff:f4:b9:
44:12:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:16 2025 by rpki-client