Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: 1+GGJPRsffOOqh/ee5dP40dcdMysBVORfhJsCch6ldI=
Subject key identifier: 4C:AA:80:18:6F:87:F8:B8:50:71:A0:D4:F6:E3:6C:7D:31:29:26:A1
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019935378D6544844DF3F82A56F6F490C7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0D5C
Signing time: Wed 10 Sep 2025 20:00:57 +0000
Manifest this update: Wed 10 Sep 2025 20:00:57 +0000
Manifest next update: Thu 11 Sep 2025 20:00:57 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: romnx/sbGiHYG1SEYZ9T9U8NkXU5aDQOS0o5AcwWL+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:8d:65:44:84:4d:f3:f8:2a:56:f6:f4:90:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Sep 10 20:00:57 2025 GMT
Not After : Sep 11 20:00:57 2025 GMT
Subject: CN=4caa80186f87f8b85071a0d4f6e36c7d312926a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:c2:4c:d9:7c:89:9b:fd:50:47:1e:fb:3c:
36:5d:30:4d:e1:23:7d:11:64:ee:70:7e:27:07:25:
95:46:cd:30:b8:cb:3f:16:26:7d:a7:3d:b0:e0:19:
56:ce:1b:cb:9c:07:3d:7a:89:b0:05:8d:f2:03:cd:
0d:a3:fe:c0:43:5e:78:61:f2:b1:ca:57:8b:e8:1c:
10:06:c2:55:c4:57:53:29:f2:cc:73:f1:12:0f:7f:
10:28:72:8f:54:8d:ed:6a:2b:4d:d2:57:ee:8a:97:
27:49:e3:30:39:48:82:2d:a5:c5:7c:7d:02:fd:1d:
2b:14:ad:56:ed:7b:f4:06:bc:b4:3f:a0:03:ee:a5:
97:a4:60:7a:98:b5:08:14:f5:84:e0:6e:2d:e4:51:
ab:22:30:98:a1:62:05:3d:8d:bd:8d:1d:f5:1d:6f:
86:c6:87:2b:d2:2f:62:0f:0c:13:bf:27:27:2d:78:
c5:be:3d:bd:b4:c8:56:24:ad:b5:2d:7e:d6:ce:49:
89:44:51:ca:f2:72:5f:7f:2d:a4:b9:ec:13:ca:9f:
a5:0b:fb:e7:ba:62:89:e3:c0:23:a2:4c:46:df:ae:
39:c5:07:cd:92:70:41:a0:57:47:69:fd:03:cc:bf:
c9:18:ce:b1:e8:fb:e1:31:5c:22:2b:02:d0:57:f1:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:80:18:6F:87:F8:B8:50:71:A0:D4:F6:E3:6C:7D:31:29:26:A1
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3b:18:a7:73:30:1d:3c:69:44:fb:52:5d:3c:ab:34:7e:68:
e8:b9:a8:e2:ae:3f:e7:8b:a6:4f:ca:96:cf:f3:3c:1c:48:e8:
43:93:89:db:d4:a8:b7:8c:9d:b4:8c:5c:c7:a9:58:5d:c5:67:
d2:04:c2:75:8c:6d:9e:be:cd:89:7e:d2:6b:87:32:89:ff:cf:
3b:8c:21:71:d1:9a:6d:66:d4:72:18:ae:50:68:11:18:70:82:
33:44:e4:77:5b:88:f7:35:b0:00:6d:b8:e0:87:6d:93:fa:29:
a8:ea:4f:fd:9e:5c:7c:88:73:1a:5e:b8:4f:9c:d9:27:36:e9:
ba:c1:b4:07:03:b9:95:d0:a8:c7:e8:9c:cc:1c:42:03:06:d5:
40:94:6a:19:7b:3a:3b:a0:e8:af:4a:1c:fb:e6:3c:ed:a4:5f:
71:24:40:38:68:5f:36:52:71:d5:86:18:b4:90:55:46:56:c4:
c2:4c:53:9d:bd:ec:71:15:f4:1e:12:e2:8e:c4:b7:5f:55:83:
e7:23:32:85:9a:f1:5a:43:52:cb:33:5e:1e:6f:62:5c:6d:19:
33:a1:b9:5b:4e:cb:ff:fb:d8:43:57:e3:2d:a4:ac:63:53:29:
17:7f:89:95:b1:6b:b6:c3:93:e8:84:cc:b7:5f:21:db:99:a7:
20:16:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:12:15 2025 by rpki-client