Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier: Q44ihh4/vBrbdW+Nj9kOLYmVa5n72WAt8PxTWW0EW7I=
Subject key identifier: 3B:A7:56:12:00:9B:75:76:95:8F:84:1F:04:DF:41:FF:55:2F:F4:63
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial: 0199239FC0F517B6F06896B30F8F932758C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: qOBi9Cwaya7fJI0jfyYEcvJoVduxguC4QGVEDeVluPM=)
2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c0:f5:17:b6:f0:68:96:b3:0f:8f:93:27:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=3ba75612009b7576958f841f04df41ff552ff463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:30:1f:8d:03:d3:a4:92:cd:03:0b:78:07:
be:1b:35:49:ce:10:4f:86:d4:34:ed:bb:db:3d:be:
9a:24:1f:06:4b:4e:ca:ce:b8:fe:ed:2c:2e:19:2a:
b2:40:5f:63:58:6a:43:36:4a:7c:e7:a1:b2:a5:45:
d3:c1:ad:4b:17:5b:07:31:e5:16:37:9f:4e:93:62:
4d:cf:44:b9:54:96:8e:48:a6:e8:74:2c:5d:d3:e1:
bd:6b:8b:d1:e8:12:fa:76:53:16:c2:d6:79:e0:f9:
d2:ea:74:20:fd:b2:e1:ef:31:ed:d4:e5:00:cf:2a:
a1:6e:28:02:47:b2:fe:45:ef:b2:1b:04:45:52:d2:
8d:ee:77:19:3b:97:f4:67:da:e2:82:b1:70:9c:de:
31:92:19:93:1d:a6:0a:cb:2e:f5:8a:cd:b0:a0:e0:
57:50:f2:c1:50:5e:bb:d9:b5:95:36:60:56:f6:8a:
e1:0b:cb:a3:a5:78:23:81:b8:f5:3a:b4:4f:67:c5:
fe:83:ff:38:b4:c5:55:07:c9:dc:ed:15:5f:7a:bd:
ea:9b:af:ba:bb:70:55:54:b4:03:f3:04:ec:7b:53:
49:b6:0b:c1:a1:d3:29:2d:f1:7a:ee:58:13:4d:d3:
30:1e:ad:7b:8d:1c:44:64:f3:99:43:7a:aa:b7:b2:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:56:12:00:9B:75:76:95:8F:84:1F:04:DF:41:FF:55:2F:F4:63
X509v3 Authority Key Identifier:
keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:94:19:ea:ab:39:41:28:57:12:88:ad:6f:c5:c2:74:99:
02:6a:16:79:fa:21:2f:6c:a4:d2:8f:79:f4:59:42:97:62:1a:
d9:01:26:82:92:e2:d4:ae:f2:dd:80:73:1c:d1:7c:15:65:1d:
68:7f:bc:74:f4:70:e3:5f:e4:c3:1b:4b:4e:78:90:e0:fc:66:
d7:25:f8:ef:d8:30:25:50:90:06:39:17:4a:2d:47:28:3d:63:
05:a2:13:c1:06:43:9e:d8:2b:a3:12:38:ed:25:8f:40:c1:e8:
2a:f3:54:ac:74:41:f9:ed:91:20:0d:06:3f:5d:f2:a8:ff:85:
12:5c:05:f9:22:ee:74:b4:65:6e:8c:c8:38:1f:5d:ef:60:c2:
e2:f8:e6:5c:b3:1c:e7:8d:4a:4f:84:38:2c:01:f5:48:a1:07:
7d:ae:b3:15:e0:07:77:a1:11:73:d8:78:1f:52:a6:a6:76:9b:
dd:2f:c5:e9:02:96:c7:99:d2:c8:7d:83:a1:85:30:8c:21:52:
c2:ba:3b:a0:88:c6:68:dd:d7:a9:42:af:1c:22:86:b6:85:8c:
49:96:70:d2:d6:d3:22:89:00:54:63:dc:9e:44:99:8b:98:55:
c4:0a:2b:38:55:85:18:85:fa:f3:38:d5:6d:d4:86:84:f3:cb:
9d:6a:16:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:21 2025 by rpki-client