Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: YQJeLkgMc60aeAqSXs4rNgNkrs8v2bp3C0C+5tYwuZE=
Subject key identifier: 8E:9E:1F:D9:07:56:CE:D6:33:5F:F9:A6:4D:F1:A8:10:BD:82:41:AE
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 019927E9B6CD5B00BDBFB7AD0E05290BD409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 0642
Signing time: Mon 08 Sep 2025 06:00:52 +0000
Manifest this update: Mon 08 Sep 2025 06:00:52 +0000
Manifest next update: Tue 09 Sep 2025 06:00:52 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: 10GNW/V7ETgnu3hv+whukLQuUSJearzmWT4eSH45VhU=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:b6:cd:5b:00:bd:bf:b7:ad:0e:05:29:0b:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Sep 8 06:00:52 2025 GMT
Not After : Sep 9 06:00:52 2025 GMT
Subject: CN=8e9e1fd90756ced6335ff9a64df1a810bd8241ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:b5:af:d2:76:3f:ea:0c:15:73:2d:d6:12:
81:7f:9f:72:fc:46:74:c6:ce:70:f7:f3:94:b6:77:
5e:9d:39:f3:90:0b:ed:dc:5f:89:5c:94:1f:4e:ce:
8f:c9:33:75:a7:c5:5b:78:a4:e7:2a:8f:7c:dc:d4:
92:84:1a:7b:97:dc:62:7b:74:b9:9b:20:c9:61:41:
6f:07:ea:ad:ff:3e:b8:5f:f8:64:86:8c:52:ea:03:
d1:cf:ed:a7:bc:02:77:1e:85:ae:bc:7d:c7:47:cb:
7e:3f:71:c0:64:95:2b:09:d1:50:70:84:99:c6:1e:
dc:a4:6f:41:67:27:bf:d5:dd:10:26:a8:73:b8:d6:
d9:1b:49:c6:81:35:69:d4:1c:e9:65:ad:fd:87:d4:
20:51:a1:84:6b:a8:23:9b:78:1d:0f:29:ff:6e:12:
59:4d:56:10:3f:e9:0c:e2:57:3d:f0:04:a2:5e:e3:
0e:d5:d5:3d:31:54:96:93:53:a3:40:23:3a:24:c2:
20:34:d5:08:3f:08:31:52:17:25:c9:67:84:ac:ef:
1f:36:97:1b:67:8c:b0:c6:6d:65:ae:35:86:20:4b:
62:11:17:a6:c3:3b:83:bd:9e:8b:4b:77:f0:89:e7:
ec:68:64:b8:17:cc:f7:c9:94:dd:11:bf:16:b8:1f:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:1F:D9:07:56:CE:D6:33:5F:F9:A6:4D:F1:A8:10:BD:82:41:AE
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:87:01:32:84:72:4f:b5:9b:46:20:b6:12:58:13:06:c9:
60:8a:be:92:64:43:a5:9a:a2:8d:3e:a7:25:ff:88:95:11:d0:
db:3b:0f:1a:42:34:9a:43:eb:26:3e:07:01:23:72:ab:d8:3e:
e3:d9:81:69:84:b5:15:60:6b:28:cb:b2:ae:99:19:9d:4c:8d:
e3:ca:df:9b:62:23:3f:6a:6a:e0:5b:5a:1a:c5:1b:9b:f9:2f:
0f:e1:4b:2b:a1:99:0c:45:ac:bc:ba:81:19:e5:f6:7f:58:32:
85:92:44:8d:24:dd:6a:cb:fa:6d:8a:b6:17:82:99:a4:1d:a6:
52:98:af:29:33:37:29:d2:03:08:06:10:02:5c:2e:c5:47:54:
2e:59:28:ee:e5:79:f2:dc:8f:82:ae:fc:64:83:b1:be:09:f8:
87:60:7d:25:31:fb:cd:da:ad:83:e4:8e:54:a9:0e:54:8c:66:
25:12:3d:fd:37:31:50:eb:cf:df:86:31:f1:41:12:27:48:99:
e9:4b:45:76:05:93:51:1b:ba:b2:84:0d:cd:93:9e:0c:1e:77:
d0:62:ca:c6:c2:20:94:c8:73:51:49:49:1e:f6:ec:ba:e7:da:
9a:51:26:bb:74:f4:1a:08:9e:a4:a0:d2:3b:4e:21:76:bb:10:
5a:1a:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:23:42 2025 by rpki-client