Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: cl++TTen7KByFn968oWUKPeTvEj1hfZkOMMYRF+cqds=
Subject key identifier: CA:D8:D7:EF:F1:23:34:B8:2D:8D:07:9F:89:F5:B7:E7:57:0E:D5:32
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01992367C827C5D68AC24BE9497923657028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1687
Signing time: Sun 07 Sep 2025 09:00:27 +0000
Manifest this update: Sun 07 Sep 2025 09:00:27 +0000
Manifest next update: Mon 08 Sep 2025 09:00:27 +0000
Files and hashes: 1: EqctIHE7t4TcfCcoLcraHvoFnv0.roa (hash: tNljGOanaYmhciyZMJ+rYRQb3y9d7kGrZ7nlMW780Js=)
2: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: dFPBQgYJIr1eonMocYmNNG0R+ESzyQpZp/qfVdN8Le4=)
3: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c8:27:c5:d6:8a:c2:4b:e9:49:79:23:65:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Sep 7 09:00:27 2025 GMT
Not After : Sep 8 09:00:27 2025 GMT
Subject: CN=cad8d7eff12334b82d8d079f89f5b7e7570ed532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:13:29:ee:b2:1d:d1:10:eb:3a:99:36:07:
8b:71:52:5b:34:5b:93:aa:00:13:f7:74:4d:da:07:
e3:df:b7:e0:f5:1f:71:39:c1:c7:35:71:4a:63:aa:
11:47:33:f8:45:3b:ce:d2:ff:6a:07:1d:b9:bc:07:
ab:12:6d:b7:9e:d0:16:85:98:0b:9a:c6:80:53:09:
ba:3a:c1:c9:29:30:de:ec:99:29:ab:ca:7a:fc:a6:
a7:6d:cb:96:b6:5b:95:58:80:23:fe:7e:17:25:fd:
c5:6d:02:a8:01:e7:34:75:50:7a:53:64:c6:4f:51:
40:8d:48:4f:09:9a:53:39:4c:46:5a:df:40:92:cb:
c3:d0:c2:46:30:31:8e:88:c4:b5:da:d6:7f:a4:e0:
e4:b4:e5:f6:2b:24:63:6b:32:11:65:cf:a1:78:58:
bb:45:38:86:06:7f:9d:a3:f2:36:41:6b:35:e1:1a:
c1:54:8d:56:fc:90:fe:01:51:af:e0:a4:30:1b:fb:
02:fb:bc:ba:c3:c1:1a:7d:4c:41:b2:b0:7d:92:7f:
79:bf:4c:66:d3:28:9a:95:27:d6:59:18:19:34:1f:
72:7b:ae:36:d8:88:a3:2e:24:a3:94:e9:37:38:a0:
bf:28:a2:64:0a:6c:70:83:a6:19:9e:19:49:6f:bc:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:D7:EF:F1:23:34:B8:2D:8D:07:9F:89:F5:B7:E7:57:0E:D5:32
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:78:b0:9c:53:94:4a:87:e8:45:36:fb:33:74:0f:f9:0a:b0:
68:67:bf:28:02:7d:bf:fa:93:fb:76:e9:e9:57:3e:22:16:68:
b4:c7:e5:8e:73:b5:f0:61:9d:11:a8:5d:40:92:09:9c:2e:da:
fd:6e:1f:b7:ae:ab:aa:16:dc:9a:6a:38:8b:16:16:47:f2:6e:
0e:02:95:2b:74:92:e3:7d:5e:f5:5c:ad:ae:ea:41:15:ae:33:
a6:42:be:68:3d:98:39:aa:03:cd:16:6d:33:91:60:8e:55:63:
99:b9:f8:cb:8f:e8:06:2f:90:18:2f:e5:6d:b2:82:07:42:e1:
80:1e:d6:b6:b3:47:7c:db:57:f2:1e:5d:57:a4:6a:55:34:48:
e1:8a:ed:92:91:24:93:73:72:52:bb:ad:7a:66:48:8c:84:53:
b2:64:14:f1:ce:a7:17:49:0b:0d:af:dd:5e:8f:6b:24:0e:8f:
7b:4f:71:99:70:04:19:09:03:d2:fc:cf:ef:dd:86:93:8b:49:
ad:e3:46:0a:cc:4a:4b:68:3a:ee:68:43:70:a7:9f:0b:d3:14:
b6:62:52:52:6d:d1:66:e9:ce:ff:a8:8b:99:1e:43:96:62:5f:
1f:31:7f:a9:c0:97:5d:21:c9:11:cd:97:99:dc:63:18:2a:84:
c6:e1:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:17 2025 by rpki-client