Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: 7novgRFOekdmBUDW9K0PQXk8Ty8GFTG0pRO6PU0jsnI=
Subject key identifier: DD:D9:57:82:B4:5D:3F:17:C7:9C:20:A4:71:67:45:59:1D:FA:D3:3F
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 01994E8937FF509E5932F9F0F3BF6952176F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1686
Signing time: Mon 15 Sep 2025 18:00:39 +0000
Manifest this update: Mon 15 Sep 2025 18:00:39 +0000
Manifest next update: Tue 16 Sep 2025 18:00:39 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: c4w0sq8Sa4HxcXEamZAx7SU1Ch1S502InGyBOTtqHCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:89:37:ff:50:9e:59:32:f9:f0:f3:bf:69:52:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Sep 15 18:00:39 2025 GMT
Not After : Sep 16 18:00:39 2025 GMT
Subject: CN=ddd95782b45d3f17c79c20a4716745591dfad33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:10:02:40:d4:8d:28:ef:94:c5:fe:ef:d8:
f6:33:eb:da:d9:44:54:09:85:8a:d2:3e:5a:e5:33:
88:5c:5f:f1:bf:cf:3d:a2:75:20:74:39:42:25:e9:
e5:58:a9:e2:9e:95:d6:22:26:f2:31:03:28:1e:f2:
23:f0:c5:92:f4:26:9c:4b:10:ab:e6:22:40:bf:02:
bd:86:42:ff:ad:6c:f6:6e:db:68:b3:e6:7b:14:d6:
63:4a:fd:30:4b:9a:fd:49:07:f8:84:c5:e2:af:c4:
db:10:5f:bd:d7:c5:9a:b0:cc:a9:4e:7c:05:d2:40:
26:70:dc:96:e1:e0:1a:27:99:08:f3:2c:e8:0e:29:
30:44:9a:3e:94:26:c0:76:a7:1b:bd:64:df:93:30:
6c:8c:14:82:b8:07:dd:21:80:fa:4a:53:d7:c1:3b:
ab:10:b2:ba:3b:14:62:a3:00:a5:c4:a9:1a:2c:19:
3f:67:e7:98:cb:06:6d:4c:ba:6e:94:af:08:a6:7e:
61:a1:a0:d2:74:28:35:8c:0d:b1:3c:b6:c5:2a:40:
12:b5:5a:d7:a4:e1:fc:fc:ed:c1:27:bd:ea:55:b0:
d1:b8:69:20:ea:df:1c:20:90:db:af:6b:bb:3a:48:
36:bf:9e:65:6d:5f:9e:69:d1:a6:8f:ce:9e:3d:ee:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:57:82:B4:5D:3F:17:C7:9C:20:A4:71:67:45:59:1D:FA:D3:3F
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:7f:e0:f5:93:b8:4a:82:8a:12:1c:25:18:3d:94:3a:d3:
ce:61:a6:54:60:70:4b:72:17:d8:70:4a:d2:ba:e3:2a:cd:7c:
59:28:e3:1d:4a:04:9e:15:70:b2:7e:6c:6e:4a:d8:36:e8:5c:
21:04:dd:d4:eb:a3:9e:b5:cd:c5:60:bf:19:c7:fc:b0:02:10:
77:09:cd:3c:7d:b1:4f:dc:31:4a:06:5f:cb:96:82:43:21:d6:
5d:ee:93:75:89:59:d9:0b:47:04:54:eb:d3:f2:5a:cb:8a:e8:
e8:d4:23:08:02:b1:9a:a5:e7:5d:e3:79:0f:ab:1f:33:63:9e:
76:14:60:08:d0:74:99:4a:14:25:9a:60:6a:af:37:cc:69:da:
bb:aa:8a:a5:a4:e9:7f:2d:a9:55:03:39:30:24:41:1e:6e:cb:
24:ec:4e:0f:4c:d6:20:48:82:94:40:87:4e:95:14:34:b6:4b:
c7:a8:ee:88:38:5e:03:3f:1d:4b:74:32:b9:bf:74:b9:e6:7e:
66:ed:4f:17:10:50:a8:66:27:35:c9:22:ce:9d:f0:a6:a8:f4:
7f:d0:80:d0:73:3a:fc:fe:68:6a:a0:76:ba:f1:d2:ba:36:b1:
20:0e:b1:30:19:7f:2b:71:b9:ab:77:ea:5b:f6:0a:f4:97:c3:
f0:44:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 01:36:52 2025 by rpki-client