Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: M4jBLpni/B6/Hjwn0vFml3V5IkLzeYxkr1UsL1PZqkg=
Subject key identifier: E4:2C:DF:0C:92:D3:E0:D6:10:C7:DA:5D:9E:BA:AA:90:40:69:D2:F7
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019923A0E735C03440D76EDC68895EBD0C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 167F
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: Bb283EmMHgO869T1EeLsRpmJeYs.roa (hash: Nwt8fGBRV8sOt4t4VlNYBdMwpGMpgaO/PFcGpK3ITpc=)
2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: TLWOBRU3qr/Z1bcX1SO6KW2sb8ckdLi2AYxw9Uf/5Kg=)
4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e7:35:c0:34:40:d7:6e:dc:68:89:5e:bd:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=e42cdf0c92d3e0d610c7da5d9ebaaa904069d2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:a0:10:2b:50:5b:e9:08:34:d4:50:8e:89:
0b:08:8d:7b:86:46:35:95:ce:00:9d:6e:a3:1f:e4:
d9:af:b5:b7:7a:53:9f:a9:60:de:76:3e:8e:9b:e7:
2e:18:74:d0:3e:ac:a2:38:0e:93:63:33:fc:2e:eb:
6d:2f:bb:49:7a:25:82:f8:c4:2e:fb:1c:32:4f:7c:
e2:b2:72:cb:28:97:bf:aa:4f:81:e0:55:d6:44:cd:
55:09:80:1b:f0:4e:65:0c:02:8d:64:c0:1e:3c:a9:
8a:d9:f1:4a:50:00:6f:01:85:5c:2b:cd:3c:f2:c3:
7b:47:47:f7:87:21:05:12:ab:45:b0:2f:a0:c9:db:
d8:fb:4f:9b:41:a1:74:4b:2f:52:28:be:fc:d5:49:
8a:d0:68:74:c9:a1:8b:8c:8e:90:b3:6e:89:ad:b4:
a2:eb:4f:aa:fc:f2:bf:3b:57:03:bb:b1:48:cc:7f:
d3:e5:51:2d:50:29:b4:a0:ba:07:5d:68:d2:28:62:
20:47:1d:e9:fc:e7:80:9a:cd:3c:7c:72:e4:37:51:
ec:3e:f3:d0:4a:18:3f:62:48:7b:a8:8c:7f:84:7e:
5d:93:6c:57:24:06:6b:51:36:68:1b:ae:7d:84:c7:
0a:98:97:d5:92:7a:6c:55:d8:b3:67:8b:32:0f:48:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:DF:0C:92:D3:E0:D6:10:C7:DA:5D:9E:BA:AA:90:40:69:D2:F7
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:02:3e:c0:96:a6:e8:88:e7:53:c4:07:0a:d1:a0:68:ee:f5:
6e:89:80:2e:d0:10:9c:7d:84:a9:de:1b:9c:e7:7b:4a:0d:57:
60:fc:32:81:c8:89:96:eb:28:b0:ce:5a:c6:d6:e1:32:d5:6d:
2b:d8:a3:f5:a1:77:32:57:5e:4a:2d:73:3b:5f:61:79:d6:49:
ab:84:64:ba:b5:09:63:cd:33:e2:68:6c:70:b6:9a:64:b3:38:
02:a3:db:57:2e:94:66:3c:b4:04:5b:c8:66:3e:c7:11:51:f7:
01:c0:19:3a:5c:92:f5:ac:80:3c:70:71:29:cd:2e:39:57:3c:
fb:68:6c:15:16:ba:db:51:20:9b:b2:3e:c0:20:c2:20:df:97:
1c:2b:3a:c8:81:d3:34:59:90:be:18:8c:fc:a4:fa:d0:46:75:
0c:8f:0a:32:b1:68:41:0d:6c:a2:f3:8d:d6:f9:5f:47:45:3e:
e3:f5:d5:ac:0c:c4:a4:59:e4:dc:86:68:2a:4b:23:35:d5:a1:
ca:7d:2c:80:c1:58:b5:82:2b:0a:a6:4d:e4:26:09:2a:66:bf:
a7:e5:1a:0f:83:58:bd:9f:64:d3:2b:61:a5:af:f7:4f:04:08:
b7:54:1b:63:8d:de:7b:c0:9e:79:07:ff:8a:8d:87:27:e1:b9:
cf:4e:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:25 2025 by rpki-client