Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File: L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier: YE0LAc7Fo6AAK3oMlO38e4ctolVsKda11jg1GKNDsWE=
Subject key identifier: 4E:7A:C1:58:CD:4A:12:B8:01:77:0F:D7:DD:0B:83:53:15:EB:F3:40
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 0199323672CC957E348F476E29E093B6E6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 06:00:53 +0000
Manifest this update: Wed 10 Sep 2025 06:00:53 +0000
Manifest next update: Thu 11 Sep 2025 06:00:53 +0000
Files and hashes: 1: Fezrzno06jPF9kifbXHX27nmWc8.roa (hash: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=)
2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: T1RLYXrVccP4tGqOjXmU7FIGaFVLeLoY2JrYO3m3Iy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:72:cc:95:7e:34:8f:47:6e:29:e0:93:b6:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Sep 10 06:00:53 2025 GMT
Not After : Sep 11 06:00:53 2025 GMT
Subject: CN=4e7ac158cd4a12b801770fd7dd0b835315ebf340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:f3:30:b0:da:ac:e7:e1:0b:6a:22:7c:a2:
e4:f4:88:a0:8f:61:ea:20:56:55:51:3a:d6:26:3b:
e9:9f:0a:00:3a:69:b6:ec:e2:d7:e7:26:b3:7e:b5:
f3:fc:b0:fb:4b:59:46:bb:79:99:2b:39:b3:7e:78:
8c:c5:69:c9:58:39:6e:b1:52:2c:d6:95:70:f4:3a:
51:a9:a0:19:b9:88:a3:2a:f0:a6:91:9a:8f:30:c9:
71:b5:1a:9a:6c:3f:74:8b:16:db:bf:8d:3a:48:de:
fa:d8:25:1c:36:ac:3f:99:7f:5f:f2:3d:8d:20:0d:
cf:13:a4:0c:91:e5:65:9f:87:97:c7:b1:88:06:a1:
51:b8:3a:b4:82:b3:ac:ca:14:8a:61:2e:9e:75:ea:
8e:91:96:20:98:db:a6:c5:f3:34:7d:84:07:03:20:
21:f7:4b:42:f1:b6:40:09:3c:d6:08:4f:be:35:11:
36:89:b6:f1:84:06:48:10:21:d0:79:0e:ae:b1:7d:
0e:10:18:da:ff:8b:d3:0e:60:9a:39:40:96:fe:17:
52:aa:60:fd:46:f2:67:28:f6:e2:42:98:f9:81:d5:
5f:d2:73:67:39:48:d8:a1:54:c0:26:c2:cf:9e:07:
51:77:7a:18:0b:96:95:18:07:59:9f:f4:fb:da:ef:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:C1:58:CD:4A:12:B8:01:77:0F:D7:DD:0B:83:53:15:EB:F3:40
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d7:75:1b:8f:9d:5c:b7:99:73:53:f7:d4:1b:ef:37:54:a5:
85:74:ff:6b:27:ea:e4:50:6f:66:29:fd:86:dd:69:f9:bf:ac:
e4:a3:be:2d:a4:c9:5d:c8:c2:3b:27:87:a2:05:d7:f1:7b:cf:
7e:7f:92:1f:dc:18:03:1e:4a:18:9c:e9:aa:0d:00:74:db:c7:
5f:d1:a5:9a:36:08:f7:e9:d2:ba:2c:8c:71:f9:0c:9f:99:9f:
3e:49:20:54:b6:0f:31:4b:35:37:d1:83:0e:71:5f:b6:9b:bf:
41:34:c9:55:c2:2f:c6:c2:0a:48:fc:38:38:30:9b:27:d3:51:
38:e6:b9:2d:df:cd:36:e4:ba:bb:a7:76:07:26:95:f7:24:5d:
ef:17:ca:73:d6:cc:d5:17:31:b1:52:65:f6:31:da:3e:67:7c:
02:80:1a:e8:b8:54:39:83:65:55:bd:07:26:9c:09:f9:a5:a6:
e9:c5:df:4a:e4:f0:05:13:36:d3:28:40:56:95:57:4e:9b:9d:
73:f3:a4:2c:45:bf:07:0e:cf:80:39:37:47:95:7c:92:f5:0e:
25:b6:f9:6e:d4:44:71:cb:1f:b5:df:a7:88:82:d0:51:e1:69:
f1:f3:76:61:5d:45:95:4e:f2:76:9f:2e:21:11:35:ac:66:d8:
51:ec:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:31:47 2025 by rpki-client