Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: xBnvdgevyWAV0nGi/K2EE4oLSFGQf/j1+K1x7fMwIwU=
Subject key identifier: B7:3B:A3:18:E9:2C:DE:CB:16:42:34:C0:B7:14:F0:E7:21:30:B2:5F
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019921B16040C6A1425F20B29D7D89CF26E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0ADD
Signing time: Sun 07 Sep 2025 01:01:36 +0000
Manifest this update: Sun 07 Sep 2025 01:01:36 +0000
Manifest next update: Mon 08 Sep 2025 01:01:36 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: KEHnfL6ZcxSbQVqVao7+WVe1JNj5ostq8csvJhFXApc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:60:40:c6:a1:42:5f:20:b2:9d:7d:89:cf:26:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Sep 7 01:01:36 2025 GMT
Not After : Sep 8 01:01:36 2025 GMT
Subject: CN=b73ba318e92cdecb164234c0b714f0e72130b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:59:7c:b0:0b:8d:b3:87:af:48:1c:e7:1f:
8b:6c:f8:d3:0f:bc:7f:bf:37:76:b4:1f:14:2b:db:
a8:32:d3:83:04:04:c1:8e:10:74:21:7c:b9:ad:4b:
5d:50:9e:38:d5:3f:1f:42:e5:fe:b8:ee:49:be:9a:
2d:23:ef:7c:b5:3c:80:5b:2d:aa:68:e1:ee:66:ed:
04:93:f5:64:f3:16:fb:c2:49:b3:ec:63:c9:4b:7f:
d4:a1:f2:56:38:0f:a7:7c:f8:50:89:99:30:a7:c2:
96:aa:6d:1d:42:ba:f6:ae:40:78:cb:fa:7d:60:f7:
e6:2a:3a:fa:59:34:5b:df:1b:09:5e:68:37:bd:91:
0b:15:05:9c:20:b6:75:b5:6f:34:30:ba:e9:40:39:
93:82:47:4d:15:2c:40:b5:e4:d6:cc:c1:97:b9:34:
70:8f:5f:7e:7c:4d:fc:ac:81:15:b7:ed:d0:68:69:
2c:68:e2:66:ee:d9:56:67:b4:fd:ab:0e:80:ab:28:
9a:02:00:39:17:a3:b8:44:c4:2f:f9:2b:ec:c3:f8:
54:df:9b:2f:23:51:7a:21:b0:50:2f:b7:00:29:bd:
ce:ae:df:18:23:a8:1e:d0:d4:e9:8e:6a:40:57:3f:
fd:ee:36:a0:d1:d2:0b:6a:21:07:23:de:b4:11:0b:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:A3:18:E9:2C:DE:CB:16:42:34:C0:B7:14:F0:E7:21:30:B2:5F
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e4:c7:d2:9c:a6:93:cf:0b:e1:86:0e:79:07:0b:31:b4:a7:
fa:0c:c5:54:96:90:f9:b7:40:f8:0a:55:d2:a8:0f:90:2a:d5:
80:4e:99:d2:1a:24:1a:66:0a:07:3d:a1:7d:c0:c8:23:75:91:
9b:ed:09:03:27:3d:79:4a:88:ae:12:89:d3:63:05:51:ea:e0:
15:4d:83:9d:03:5b:a6:ed:68:9a:e7:0c:c2:9f:ef:7e:79:6d:
9c:53:f0:55:97:bb:b5:9d:d6:fc:18:e5:fa:e3:13:3b:88:7b:
04:9c:d6:52:a7:08:3e:b5:e3:dc:c2:64:0a:ee:89:29:0e:3d:
6a:fd:65:15:27:26:08:a9:a9:a3:09:69:3a:63:35:d5:ad:76:
08:56:37:b9:28:59:ee:99:4d:42:7e:84:53:87:f6:de:23:13:
ea:2a:b9:1d:9e:ad:17:87:3e:5e:86:bc:82:b4:d0:15:f1:60:
65:39:24:3d:b1:4f:85:04:1f:e7:39:f8:2d:03:5c:d7:41:34:
d4:31:d6:0c:3b:97:ea:3b:ab:db:2c:5b:cd:9c:0e:b1:8b:68:
7e:bb:3c:c8:10:f8:ca:70:de:89:46:0d:d3:f9:75:61:75:cb:
80:c3:f9:71:c3:aa:d8:c2:47:f5:0f:ce:ce:7e:a4:ae:52:8c:
b0:e3:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:04 2025 by rpki-client