Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: 2plVSPZbY4nzTbGQPoMNy2LZlmEf27xrIMOD2X+S1d4=
Subject key identifier: 60:35:98:3D:17:88:79:6F:80:3B:F9:54:17:BD:8E:03:9E:DE:A2:35
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 019921B16A7A255938B443F036EC276C0A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 0251
Signing time: Sun 07 Sep 2025 01:01:39 +0000
Manifest this update: Sun 07 Sep 2025 01:01:39 +0000
Manifest next update: Mon 08 Sep 2025 01:01:39 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: kacTcwMtfnb4UYum2J7+PcXnT6xVDXj/VnymGqKZbro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:6a:7a:25:59:38:b4:43:f0:36:ec:27:6c:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Sep 7 01:01:39 2025 GMT
Not After : Sep 8 01:01:39 2025 GMT
Subject: CN=6035983d1788796f803bf95417bd8e039edea235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:56:1e:69:bd:0e:1f:3c:2d:47:bf:b2:bc:
c1:25:ef:4f:23:d5:70:f6:d1:a7:72:42:ff:06:18:
77:cc:66:19:fc:3f:a9:17:e0:d9:73:7f:ec:0c:7f:
3c:2e:b1:58:f3:e0:3d:1e:94:fe:88:94:53:76:b7:
e2:4f:b6:f1:b4:69:87:55:ea:3c:4d:60:3b:75:57:
2f:89:34:a4:dd:8b:6f:fb:5f:b1:22:09:86:03:7d:
1a:54:b0:f3:2f:16:0d:ae:36:81:0f:aa:70:6a:e1:
15:95:4a:16:07:f2:5b:62:51:b2:d6:13:91:b6:2d:
70:63:a2:c8:c3:c3:78:21:34:c2:9a:2e:67:1e:2c:
69:4d:d7:81:87:70:63:c1:ab:7b:99:6c:19:20:ce:
42:89:32:b1:7a:e7:f3:00:94:a8:f7:04:c6:58:77:
41:3d:3e:b8:3f:77:49:f7:ed:a2:7e:c8:f4:c0:62:
47:d9:80:30:a5:c8:0e:02:7f:f1:52:2f:7b:0e:5d:
7d:45:01:c4:27:35:9e:11:86:c0:87:0a:f8:75:d3:
1b:f3:b7:14:92:2a:0a:0a:5d:b2:51:55:16:a7:16:
34:28:df:e1:9a:b6:ab:1b:9a:3c:d5:06:53:98:72:
a3:e9:f6:17:78:8a:ee:33:e4:dc:52:bb:ba:e4:67:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:98:3D:17:88:79:6F:80:3B:F9:54:17:BD:8E:03:9E:DE:A2:35
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:9c:6d:74:21:6c:df:ea:6d:ac:4d:42:98:b3:3d:5c:78:
48:c6:b0:ff:cb:ee:d0:ab:18:c7:6f:51:b5:ef:2f:72:b3:29:
e7:f6:99:a8:d8:ef:08:a6:26:6d:8c:e6:8a:b0:a4:0a:20:a6:
8a:a4:bd:4f:99:cb:e7:24:98:e4:b6:9a:5c:80:d2:48:58:d8:
d4:ac:2c:8a:16:c1:f6:24:a1:1d:60:57:5d:1e:cc:ec:d1:17:
db:08:d2:72:58:05:09:fd:5b:82:fb:f1:f6:e1:1b:b4:c8:95:
f0:aa:c0:b0:38:af:b9:47:bb:ff:69:f8:8c:10:15:c3:8b:c7:
66:ce:3a:9f:f2:ba:74:9d:9f:5a:12:7b:2d:40:3b:3f:a0:1f:
2f:c7:25:62:a3:77:70:4e:c5:5f:28:8a:67:21:7d:af:e1:45:
fb:3e:21:58:bb:32:f6:ad:44:91:34:5c:52:6c:b0:24:b5:38:
73:73:2a:33:9f:e0:7d:ad:47:0c:4b:f0:65:53:be:af:99:ca:
f4:11:16:e9:80:c4:e4:a3:3e:2b:3d:4b:68:72:c1:89:24:43:
73:9f:53:b7:0b:de:31:c4:57:65:46:f6:c6:1b:f9:8a:d1:42:
91:db:f8:87:c2:cf:a9:1c:e1:f9:d0:6b:bc:dc:6d:86:74:28:
80:8e:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:47 2025 by rpki-client