Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: I5eqEmH34b6Yytypf3G65oECra6q5RSNlZHMbR2zr3A=
Subject key identifier: 3C:2F:2E:6E:E6:FA:56:B0:17:8E:7F:91:A5:F3:26:55:58:BE:68:81
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 0199221ECB2582B4E36EB64CF2A77344D5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0CCC
Signing time: Sun 07 Sep 2025 03:01:07 +0000
Manifest this update: Sun 07 Sep 2025 03:01:07 +0000
Manifest next update: Mon 08 Sep 2025 03:01:07 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: AZm1L9Zwk+z59+1c9l3UX/hPraFIF6GDD6bo9O9lxgk=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cb:25:82:b4:e3:6e:b6:4c:f2:a7:73:44:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Sep 7 03:01:07 2025 GMT
Not After : Sep 8 03:01:07 2025 GMT
Subject: CN=3c2f2e6ee6fa56b0178e7f91a5f3265558be6881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:88:e7:39:5d:65:8b:dd:75:09:3a:21:0f:
66:fd:08:28:43:3b:8e:59:2d:e3:4d:c5:05:8a:44:
d6:ff:d3:52:42:85:ee:53:06:fa:5b:55:cf:b4:0b:
52:c6:49:8e:ad:a4:25:08:19:53:6a:05:89:2f:6f:
90:81:80:e1:2b:98:7c:e4:fd:21:49:36:52:15:a6:
66:2d:0c:18:16:8b:fa:10:11:a5:36:32:e8:79:f3:
b5:f7:87:44:cb:5b:29:f8:2b:c5:b9:fb:70:80:b2:
63:11:06:0f:76:99:6f:57:79:80:21:11:1b:2c:b3:
b4:fc:b9:87:89:da:b1:d6:91:ad:b9:9a:50:03:07:
82:29:b1:c1:ff:1b:bc:85:d0:e0:d3:55:f4:73:1f:
36:bf:db:d8:4a:e5:66:3b:f4:a8:59:36:d4:4f:f9:
e2:c3:f5:37:a5:d2:d5:84:54:c9:74:06:5c:e9:37:
07:13:3b:5c:56:ec:5a:e2:07:78:0d:e5:1c:b2:e9:
1a:ed:85:e3:b6:d4:80:65:a4:23:c1:bc:6c:af:59:
db:92:26:3f:90:a6:f4:24:8f:76:08:f0:e7:57:2e:
0a:fb:bc:88:ee:95:19:c3:bc:c0:ac:16:40:64:2f:
0d:66:71:cd:e5:46:42:cf:10:29:7d:65:8f:21:2d:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:2E:6E:E6:FA:56:B0:17:8E:7F:91:A5:F3:26:55:58:BE:68:81
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:3c:4b:14:e3:9a:e1:c7:25:03:4a:15:df:bc:ca:d4:c2:
0e:c4:11:ec:91:2e:f9:5d:f6:1f:02:3f:51:f1:71:13:3c:f6:
c5:a7:8d:b9:55:3a:ee:54:6c:51:0b:b2:de:79:c7:67:67:f0:
bf:58:36:09:e2:d0:cb:3b:00:9b:2a:30:21:0e:7f:60:28:18:
e6:9b:8b:9c:73:df:5e:3d:ec:29:2a:b7:9c:ee:ea:67:ec:ef:
09:7c:2a:2f:01:e5:8b:9d:e7:15:da:db:0d:6d:b3:f6:38:12:
27:ce:a4:ab:01:03:5d:c6:b1:3c:10:c5:53:bc:fd:fd:ef:96:
24:8d:86:ec:14:ea:78:68:2a:23:c1:0c:85:73:73:f7:b1:18:
d9:40:45:8a:82:22:33:1e:ba:46:1f:3c:8c:88:5a:2a:c2:a3:
5c:26:9b:ab:96:13:f2:37:a0:da:83:cd:6d:8b:bb:64:df:13:
f9:45:48:8e:4f:71:10:19:9e:2b:bb:76:93:39:26:d3:93:40:
9a:bc:91:93:56:94:5a:1a:42:42:3a:fc:e0:46:5e:4c:bc:0e:
c1:4b:69:79:c9:ee:a6:71:c8:0c:27:61:e9:db:ab:c6:75:9a:
63:c0:87:70:44:36:b7:6c:08:f0:48:e2:a5:89:e2:22:0d:33:
74:7e:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:39 2025 by rpki-client