Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: FAeGfBEi0Tj6rJ6nF5iCnHbTRj5CUVOpK41/JDUW+0A=
Subject key identifier: BD:45:63:A0:49:83:C3:DC:00:0D:E5:62:85:42:10:95:F4:EB:98:EB
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0199326D112F220AF76159ABCD1F660CE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 16B8
Signing time: Wed 10 Sep 2025 07:00:32 +0000
Manifest this update: Wed 10 Sep 2025 07:00:32 +0000
Manifest next update: Thu 11 Sep 2025 07:00:32 +0000
Files and hashes: 1: BrO3qC9sElz84kZt0TlGLTPrFfo.roa (hash: Xac1gSwp3PaG99+Svk2b1wiRsCto7zOmCczTzvRnd5o=)
2: HV6okiZ_Mm9pgAnQyp-neXvD9Ys.roa (hash: Z8kbWAqPsQVcPrsGh46E3DnYGpnTYUasQHe7qcWJi5s=)
3: KChU0Ss7IUSMmcrbp9hvvsOcKSI.roa (hash: tqUwPcZIIPi8c5hbtPgv87qi30gm6VRMDquHIJzvPTE=)
4: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: 5OEzef3U/zUtR7yoCX5+aO0y/V56yBbLfj/WtgTwJRU=)
5: mb8LY7nbnDJCruGLljcH6XmZLok.roa (hash: HXr3dJ/DTsUePOKMb4j7QqYwB0wBIRDSnQ0yqP6D61g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:11:2f:22:0a:f7:61:59:ab:cd:1f:66:0c:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Sep 10 07:00:32 2025 GMT
Not After : Sep 11 07:00:32 2025 GMT
Subject: CN=bd4563a04983c3dc000de56285421095f4eb98eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:21:b5:a5:8c:89:af:3d:ae:a1:8d:07:d9:
98:74:ba:36:49:dd:f0:10:9b:02:aa:c4:b6:0c:d7:
ee:13:89:57:46:07:ef:73:83:ef:05:83:b0:cf:46:
03:90:00:17:e3:b1:54:1a:ed:31:48:27:fc:ea:c7:
97:b2:4c:8d:d6:0c:34:55:a4:47:e0:f3:13:e2:96:
0e:99:19:62:f6:54:ec:cb:93:1e:39:3c:87:37:ed:
e8:02:45:99:c8:e2:19:2a:59:47:e1:6e:e3:d3:e4:
8d:12:a1:43:fc:41:ad:23:d1:c3:ee:c8:b7:43:97:
f7:3e:62:ea:d2:ee:58:50:28:fe:1d:e9:10:80:98:
7f:6d:32:04:fa:31:f8:48:77:51:af:a5:12:8a:a4:
6b:12:f8:19:60:84:fa:d5:92:67:13:e9:56:5c:b6:
ab:8c:6f:41:aa:0d:48:1f:ad:63:78:ea:5f:ef:e2:
84:10:7d:75:73:8e:67:aa:18:bc:39:d0:ab:7a:ba:
e7:9b:f9:9b:51:57:da:65:12:28:73:db:83:55:aa:
c0:60:e8:12:0c:9d:ec:9e:b2:9b:1d:80:2b:d8:a5:
09:31:ae:9d:c9:94:8f:68:b8:25:0a:cf:2c:d5:0f:
f5:30:2b:27:7c:9c:dc:4b:af:63:78:df:49:4a:5c:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:63:A0:49:83:C3:DC:00:0D:E5:62:85:42:10:95:F4:EB:98:EB
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:42:e1:09:4a:4e:a6:1b:2e:bd:c5:af:4c:fe:ee:37:91:
c7:e3:c5:d0:f9:94:fe:e8:af:57:ad:64:7d:3d:dd:6a:df:16:
c5:89:d3:fa:b9:e2:f9:a1:a2:c5:88:5a:14:a2:d3:21:a5:48:
66:ca:bb:59:1f:9a:a0:ec:71:1b:51:b9:2d:c6:ea:be:88:b9:
77:4e:85:5c:a8:be:66:bf:37:05:8b:fa:8d:44:c9:f1:87:96:
67:b1:48:74:76:79:72:5e:f3:30:af:ec:93:1a:fc:f2:7c:65:
6b:48:45:fa:80:fb:40:7c:50:8f:dd:6f:22:7f:2c:53:52:0d:
4e:2e:03:90:0f:5e:9f:33:5a:20:fa:77:46:13:17:00:d7:aa:
c6:9e:4e:67:c4:74:08:2e:13:f8:70:26:b3:f9:b3:77:f0:b6:
10:98:a8:69:5f:5a:27:e2:d4:aa:16:80:a7:ee:1c:1d:bf:57:
78:48:af:04:21:62:e8:af:71:25:94:b6:5c:09:67:80:ed:1c:
78:b8:dd:50:6a:39:c7:a1:58:85:11:8e:ff:e9:03:6f:c2:c7:
a3:8c:94:4e:5f:31:39:dd:d3:24:1e:e9:ad:f1:e6:f7:9e:c3:
11:31:4b:70:6c:da:3a:6c:d4:85:7e:c2:1f:08:f2:cd:e5:d5:
ea:27:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:10:20 2025 by rpki-client