Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: zAc+IPZd11MPvUJAa2EcLh2k0eB4LkITOWnIMnM7XRQ=
Subject key identifier: C6:34:5D:39:7B:27:EC:38:E0:8E:66:F1:1C:6B:40:8C:17:7C:CA:8C
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019933125B3131329B62695C1AF867522385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 148A
Signing time: Wed 10 Sep 2025 10:01:04 +0000
Manifest this update: Wed 10 Sep 2025 10:01:04 +0000
Manifest next update: Thu 11 Sep 2025 10:01:04 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: jFbI1CJEOebx0W0NqWSle3GbaH2kTDbInGnD+/udi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:5b:31:31:32:9b:62:69:5c:1a:f8:67:52:23:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Sep 10 10:01:04 2025 GMT
Not After : Sep 11 10:01:04 2025 GMT
Subject: CN=c6345d397b27ec38e08e66f11c6b408c177cca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:f6:0e:3c:45:a4:f6:f4:e9:53:3f:b4:f9:
30:08:e7:3a:03:2a:fc:fd:29:b9:45:6f:0b:4c:cf:
53:f3:af:3f:7b:b1:d3:73:c4:8d:96:5e:11:cc:28:
12:e6:86:7e:27:45:6f:a3:92:e6:25:d5:14:1f:3d:
6e:a0:de:d1:ac:5c:66:5f:c9:53:e8:0e:2d:a6:29:
a5:34:cd:7b:f2:fe:b3:11:ab:ba:00:a8:57:44:db:
87:74:00:7d:e2:52:0d:ef:c5:40:0c:d2:db:bb:d1:
19:a3:49:8f:d2:47:7c:bf:8e:a8:54:59:48:fb:04:
0f:51:f3:45:1d:82:db:0a:92:92:78:7d:e4:60:3c:
61:45:0c:ba:10:b4:67:4c:fc:55:4a:06:bf:d0:0b:
8e:82:b9:b0:cb:25:a2:aa:74:c7:26:8e:f4:fe:39:
54:de:a3:fb:74:45:7a:ad:01:06:c0:68:1b:ff:69:
1e:8a:16:8a:f3:3b:31:79:bb:41:1a:eb:73:c7:bf:
c0:83:a7:27:6b:b7:ff:1e:65:f5:27:a0:81:f7:1e:
85:c5:9f:e0:e3:29:93:6d:42:56:a5:f9:19:21:3e:
10:a2:d7:68:ae:57:ff:3c:f6:5b:62:41:2d:3e:f7:
59:fc:5d:b5:ad:d7:70:09:bd:ac:a9:54:cf:da:0f:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:5D:39:7B:27:EC:38:E0:8E:66:F1:1C:6B:40:8C:17:7C:CA:8C
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a5:c5:91:18:ac:9a:fe:4a:82:96:1a:d5:42:8d:36:1d:65:
4d:6d:ff:95:8f:03:b5:ae:7d:15:34:b2:25:46:ce:ef:ae:19:
a7:14:7a:0e:75:a5:3b:ca:cb:f7:3f:22:2a:58:2e:47:ea:cd:
8b:59:ab:d4:b5:51:d6:78:75:52:5e:77:77:aa:68:59:33:97:
8e:1e:5f:c4:00:f3:95:9a:04:66:b2:d6:78:73:a2:fc:a8:49:
70:a5:eb:37:99:15:f7:89:c4:ab:4d:1b:6c:77:80:90:31:42:
86:e5:f7:05:b2:fe:a1:84:8e:a2:aa:b9:2e:f0:80:87:15:54:
42:58:76:8d:e5:ef:8b:e6:23:fe:c1:be:59:18:b8:a1:f8:8d:
dd:66:9a:74:16:cd:4a:b3:8f:ee:bb:4b:d8:e9:26:e1:15:58:
e8:c7:1c:ee:f8:33:7d:e1:79:c8:4e:54:f2:3f:cc:b1:a4:b7:
a0:82:db:5b:f4:ef:24:7a:70:da:ef:0f:b9:83:10:f4:df:07:
9d:96:a4:bf:33:32:17:b1:95:8e:11:15:02:8e:92:37:87:0a:
e6:c5:d9:2a:00:42:c7:61:8f:c8:e5:c6:9d:43:42:c1:06:93:
af:43:b2:95:09:90:de:45:6e:40:ce:c5:f7:1f:2c:d8:ea:13:
4e:60:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:26:46 2025 by rpki-client