Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: z+ycmdoIxkoCB7ggrIaC7Keyhd2ocs1t1Goa3im0tgw=
Subject key identifier: 85:FD:20:FE:F5:58:F5:DB:82:97:CE:BB:7C:B0:E4:F4:97:EA:9F:B0
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019921B0D2A3F75695DFB281AEC8942E9A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 1188
Signing time: Sun 07 Sep 2025 01:01:00 +0000
Manifest this update: Sun 07 Sep 2025 01:01:00 +0000
Manifest next update: Mon 08 Sep 2025 01:01:00 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: Atd33dml2QUeUPvC2RbnCRSa93C6pcPr9RFUxCIyuWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d2:a3:f7:56:95:df:b2:81:ae:c8:94:2e:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Sep 7 01:01:00 2025 GMT
Not After : Sep 8 01:01:00 2025 GMT
Subject: CN=85fd20fef558f5db8297cebb7cb0e4f497ea9fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:4e:07:d9:4d:11:f6:73:b0:91:8f:39:a7:
4a:70:06:d8:fa:2d:ee:a7:d2:6e:81:f1:b5:31:62:
7d:e5:3a:3a:2b:fb:54:e7:3a:48:e9:b0:df:08:d3:
13:a4:68:2d:b9:98:67:41:0c:03:90:cf:a0:8f:2c:
8d:15:21:27:a5:74:a4:cc:e5:9c:28:9f:f2:10:2d:
04:06:3f:6a:79:82:cc:a6:7c:2f:3e:51:e6:8c:aa:
ab:00:ec:2d:5c:06:24:e8:09:d1:52:a1:50:db:87:
a7:42:b9:ef:f9:83:1d:70:1a:17:c8:8e:d1:28:f7:
11:33:88:ea:05:a1:b9:a0:71:f0:1a:a4:49:b2:a0:
03:ff:ca:8b:33:4a:c5:30:fb:1f:07:19:a0:0b:08:
1f:31:43:e5:90:89:7e:d3:4c:2f:81:aa:f1:f9:42:
ed:5f:6b:78:a2:6d:37:48:9d:00:dd:87:be:17:d5:
e2:a0:17:5f:9b:ba:7d:71:63:4d:c9:d2:ef:b2:78:
2d:d9:1d:73:29:29:9a:30:5c:b4:a6:fc:09:77:bb:
35:44:af:61:31:b4:b1:7d:33:f7:2f:e9:55:2e:ee:
77:5b:9d:9c:00:91:52:6a:50:f6:10:4d:65:87:91:
92:76:6a:ad:eb:40:69:b6:b7:3e:f4:3c:3f:01:3c:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FD:20:FE:F5:58:F5:DB:82:97:CE:BB:7C:B0:E4:F4:97:EA:9F:B0
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:31:fb:52:52:8c:30:20:1d:42:42:63:b5:65:78:b8:8d:1a:
44:20:b9:d4:64:5a:bf:92:73:8f:e6:16:e2:09:2d:46:0d:b0:
b1:82:ee:ac:63:57:b3:d5:c9:51:80:cf:3e:02:0b:4b:65:ea:
79:cc:18:f3:24:9a:29:2e:96:2e:c1:1d:58:c8:d6:e4:3d:04:
64:ce:21:61:a0:8f:15:aa:0f:94:9d:db:50:62:d2:04:a6:73:
df:b1:1e:97:f6:26:b8:0d:9e:a8:bd:d7:3f:f4:dc:07:f6:f0:
1a:49:b2:78:ad:d6:ae:0b:9b:f9:65:67:6f:79:ad:77:57:43:
75:84:7a:7f:ac:86:08:33:21:aa:69:bb:27:dd:4c:d1:ce:c0:
6d:d5:64:bb:f9:c1:5d:c8:84:9d:60:27:5b:1f:bf:6a:42:b5:
a0:e2:ff:51:26:91:fc:c7:5f:fe:27:32:97:66:6a:db:c6:a8:
92:8a:7d:f3:1a:fb:c5:55:70:0c:f4:cb:ea:08:7d:52:91:cc:
29:65:e4:a1:35:d9:2a:b9:98:b2:0f:23:ac:68:2f:13:a2:7a:
c1:16:65:d6:42:b3:90:e7:7b:c2:46:e9:79:58:af:f0:26:56:
cd:33:f0:9b:0d:81:e8:c8:35:08:8e:a4:46:ff:5e:5c:86:cd:
68:7d:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client