Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: DyGEb3TCbXDU9/Nnsb4sRojYEeC3lIkzuqZVuDdUiwI=
Subject key identifier: A9:A2:85:96:E9:B6:2D:EC:9D:89:9F:6A:73:06:ED:E9:0B:5C:7E:A1
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019926698279AE33B6D8B3BFF9198EB96B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 08C0
Signing time: Sun 07 Sep 2025 23:01:12 +0000
Manifest this update: Sun 07 Sep 2025 23:01:12 +0000
Manifest next update: Mon 08 Sep 2025 23:01:12 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: uf7ipEWivlgzHknjsVSF4VReXdUtMxUH1UZTvPE2AHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:69:82:79:ae:33:b6:d8:b3:bf:f9:19:8e:b9:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Sep 7 23:01:12 2025 GMT
Not After : Sep 8 23:01:12 2025 GMT
Subject: CN=a9a28596e9b62dec9d899f6a7306ede90b5c7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:25:bf:67:a3:8f:9f:c9:fd:dc:2f:b3:8e:
08:dc:84:57:31:72:20:89:07:91:e0:1b:f2:42:92:
87:85:ce:b1:12:0d:99:82:06:7d:54:ec:af:1c:0b:
eb:5c:23:39:2b:d6:24:36:ab:aa:3b:9d:5f:8b:c2:
e2:26:5e:a9:8d:3c:58:e0:d5:15:57:45:54:d2:59:
2f:47:9b:ec:75:ed:59:d4:07:10:c2:57:b2:06:31:
86:c2:da:0b:fa:87:bd:ad:0f:ea:0d:65:ae:eb:b5:
5c:b8:fe:f3:b1:72:9c:5e:62:6b:84:39:83:7e:f9:
14:18:6d:1c:83:57:c3:db:d5:74:a4:b9:4b:a4:e1:
97:ae:4f:f4:e2:d7:c0:31:80:f7:70:2c:b8:dd:af:
73:c6:ac:26:91:22:e0:34:20:db:29:30:47:c6:c1:
6f:b3:04:fd:5c:9c:b4:7e:ec:b4:c2:18:eb:95:27:
c9:bc:2d:8c:c7:54:2d:b8:01:cd:39:c3:8d:8a:4d:
32:ac:e4:ca:b8:db:66:fb:79:07:1e:c2:4a:b4:82:
45:85:6f:ef:f0:0e:3c:6e:38:26:56:14:14:bd:e8:
f7:61:11:c5:f0:25:3b:a3:1c:ba:1b:48:11:3f:7b:
0c:47:b4:72:40:6f:3a:63:87:3c:ee:c3:5a:ac:c2:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:85:96:E9:B6:2D:EC:9D:89:9F:6A:73:06:ED:E9:0B:5C:7E:A1
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:b5:9f:d0:57:16:d7:87:8d:9e:50:81:66:40:82:75:fc:
e8:54:e9:92:83:10:cc:88:40:20:e5:12:b2:eb:ad:28:bd:b1:
5a:1d:5b:98:bb:ca:d8:ef:93:08:9c:05:6e:9f:4d:64:e5:b6:
93:03:86:fc:12:4a:95:11:c9:81:d9:47:4a:ce:73:b6:ab:f0:
f9:3c:f7:53:7a:ae:f0:95:da:2b:10:0a:4e:ba:1f:45:af:09:
8a:38:d1:a2:e7:c8:69:72:ad:27:24:2c:fd:57:9e:17:d8:68:
b4:18:0d:2a:50:6d:f7:22:51:76:93:b8:e0:87:b6:c9:61:5b:
74:94:51:23:fa:20:dc:e6:5d:1a:15:67:99:fe:c1:71:5d:e3:
6e:bb:d1:08:5b:46:b8:90:be:47:48:55:f6:3e:69:b2:7f:fb:
77:f3:03:b9:32:b2:48:57:4e:a9:73:3a:05:18:60:e1:52:32:
a4:41:8e:6e:6c:27:41:7a:3f:ed:d4:c8:54:89:2e:9f:0d:f6:
d8:43:1f:52:1b:0b:e4:4d:a1:1e:79:2f:be:01:04:3a:25:ea:
f9:08:19:df:b0:af:79:c3:ed:32:e5:ea:df:7c:eb:fe:90:af:
a0:bb:50:f5:9b:b6:ce:9d:ef:90:63:49:57:7d:93:b4:a6:7f:
6c:37:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:46:25 2025 by rpki-client