Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier: KbDLhWtYZgb56k7lT07zjjFn/lVUf2xkJu8sPiMpAR0=
Subject key identifier: 70:B4:E5:63:FC:CC:80:C2:29:4C:23:F9:00:3A:EF:27:E1:21:3B:62
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 0199270DC8767EF144B25B4DBAF47C5AC547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 02:00:38 +0000
Manifest this update: Mon 08 Sep 2025 02:00:38 +0000
Manifest next update: Tue 09 Sep 2025 02:00:38 +0000
Files and hashes: 1: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (hash: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=)
2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: 2TFBc7ZlUvm9Qs63e/41QNQHbD4FK3AoNFg5oy31Zqg=)
3: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (hash: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=)
4: raNLX_Rlhb8qt_iqRNHRfzz2onw.roa (hash: CXUwU+ePCPV8g/dv883GbgzoP+FoppZgtKTpY2iI3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0d:c8:76:7e:f1:44:b2:5b:4d:ba:f4:7c:5a:c5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Sep 8 02:00:38 2025 GMT
Not After : Sep 9 02:00:38 2025 GMT
Subject: CN=70b4e563fccc80c2294c23f9003aef27e1213b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:85:05:3b:2d:f9:ae:db:bc:d9:40:fe:a1:
6a:8c:d9:43:13:b9:92:cc:35:e6:5c:90:fd:5c:e9:
85:4b:39:6b:9b:3b:2e:3e:a5:4b:1b:e2:f6:a2:47:
ba:ee:1b:cb:05:c7:82:ca:61:d0:cf:ac:77:22:d6:
69:06:14:f7:bc:17:80:ff:6c:88:3d:f8:7b:c4:11:
03:c4:c5:32:67:72:0a:88:4b:f2:a2:84:f9:27:43:
cc:c9:25:1b:55:09:48:f6:84:82:17:99:c8:dd:99:
4c:4b:1d:64:bd:04:36:35:34:6e:40:52:1f:ff:cb:
28:64:06:de:91:72:75:0f:93:6a:03:7f:9b:ad:31:
4f:ce:e1:4a:ca:71:59:d3:1e:81:b6:5f:c7:bc:94:
b0:15:d8:d1:b2:db:bb:02:bd:b5:52:e8:0b:c0:1a:
b3:b1:f1:48:01:e6:cc:0d:09:3c:3a:13:b3:d1:78:
66:3d:d5:89:31:b9:c8:2d:0e:0e:10:50:29:29:f1:
54:13:8d:fd:43:6e:2c:81:ff:48:39:b7:69:23:ac:
83:93:fc:ca:bd:39:f4:c5:78:92:b5:37:1a:91:a4:
b6:29:21:4c:e2:2e:e2:7c:0f:91:53:43:e7:94:cb:
f2:61:28:ca:9a:3e:a8:83:80:ae:e7:34:e6:23:63:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:E5:63:FC:CC:80:C2:29:4C:23:F9:00:3A:EF:27:E1:21:3B:62
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1c:5f:17:bb:12:29:95:19:81:96:5c:e9:d2:1c:e8:8e:c2:
9c:93:42:4d:7a:91:a4:04:8f:3e:ab:31:7d:2e:6d:1c:22:85:
50:90:9b:c4:75:20:68:84:71:db:28:e5:cc:45:e6:12:cf:cb:
07:6d:e2:d6:c7:95:34:a7:61:b1:cc:9e:0e:34:da:b6:7a:74:
4d:3b:c5:0e:cd:5f:e3:cf:d5:3a:d7:e5:40:55:38:05:b3:8c:
46:bd:ad:df:19:84:a7:35:01:ea:aa:04:de:a4:2a:a7:6b:f3:
10:40:b2:2a:0e:5e:32:55:cb:8c:bd:66:a4:f5:e6:fe:ec:3a:
ff:de:62:f5:4a:c1:df:4e:a5:b9:43:38:1e:f2:77:72:db:da:
a5:9e:5b:51:d9:d8:dd:87:b0:2a:8b:d1:ae:48:79:59:ea:48:
6c:5c:e7:11:94:fb:9a:b3:a1:51:bc:05:bb:da:08:80:85:1d:
7f:e7:b1:1a:9d:2f:31:21:2a:d2:9f:ec:f8:85:c0:f2:da:1c:
59:1d:37:53:40:ac:19:39:09:b7:47:71:3d:e8:68:c9:24:4f:
eb:28:75:d4:6d:df:b8:04:df:21:0b:ed:89:da:a6:c8:d5:5d:
b9:7d:61:34:5e:e0:94:cd:28:8e:30:c2:01:cf:1e:6d:42:ae:
af:29:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:31 2025 by rpki-client