Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: S9QMF78qzt0OgwOY9Um4OX7JX+/HP+ElSpk9YepS58E=
Subject key identifier: BB:97:8E:2C:CD:84:63:F2:EA:FC:47:87:44:71:E4:5F:83:C0:E8:13
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0199172CC5A74E1B2FB1FBC33C2E97CFCCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0621
Signing time: Fri 05 Sep 2025 00:00:34 +0000
Manifest this update: Fri 05 Sep 2025 00:00:34 +0000
Manifest next update: Sat 06 Sep 2025 00:00:34 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: UG1i0rAw9CwbDWY5cx4d00DBFOAg9HIcKloNEqxy1BI=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:c5:a7:4e:1b:2f:b1:fb:c3:3c:2e:97:cf:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Sep 5 00:00:34 2025 GMT
Not After : Sep 6 00:00:34 2025 GMT
Subject: CN=bb978e2ccd8463f2eafc47874471e45f83c0e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:1c:c0:f2:40:57:68:e3:83:e4:70:a9:7f:
96:80:38:36:b6:2e:dc:d5:eb:e8:b3:a8:ba:47:f9:
5d:18:23:cf:c4:04:4d:f8:e9:ef:7d:c6:5a:9f:e8:
1a:18:7d:ea:24:ef:42:71:7a:d2:84:4d:27:4e:39:
88:e9:57:57:f0:85:58:51:04:15:b2:90:79:00:97:
0a:bc:7b:c4:ac:6b:5c:aa:da:39:14:fe:b8:ea:42:
86:0a:bc:4a:c0:46:54:dc:38:0e:d9:c0:9c:20:3f:
c8:25:cb:46:bb:57:98:08:8d:37:be:05:75:09:3d:
8d:e4:7b:07:3e:8b:86:b8:a5:a6:ac:a6:63:c0:5b:
43:ef:4b:a0:f3:cd:1c:a7:02:a5:fd:7b:dc:11:52:
6b:bc:1d:7b:5e:b4:cb:8a:3f:8b:86:08:6c:12:1d:
7e:d5:67:25:c3:6c:d7:f5:a5:0d:11:ca:ee:ff:75:
ad:25:10:73:6e:79:1e:3c:9a:d1:80:3e:8d:f2:4e:
3e:7f:4b:58:0a:87:b8:d7:c8:72:86:18:ea:1f:23:
61:d6:5e:fd:4b:34:d9:d5:7d:4b:4c:41:46:65:57:
7b:3d:f8:dc:8f:55:ac:3e:d9:08:5c:c2:57:47:ef:
4c:b7:d8:74:4e:a1:c8:13:e6:93:8e:21:7c:dd:d1:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:8E:2C:CD:84:63:F2:EA:FC:47:87:44:71:E4:5F:83:C0:E8:13
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8d:9f:94:09:59:16:a0:b1:41:a6:f8:ff:93:56:c9:17:f7:
df:b0:ae:6c:39:4c:ee:d4:f3:70:b4:31:30:85:a5:f8:a6:bb:
62:a5:51:72:f5:81:5c:bf:59:ac:65:a2:2d:da:7a:a2:ef:b4:
ba:fe:36:8a:ab:56:c0:85:e1:13:ed:12:88:19:1d:5f:8b:85:
d8:e7:db:6f:da:d6:38:b2:ef:90:f4:b7:c2:12:b5:01:9d:2a:
1d:a6:9c:7a:f6:9b:37:21:5f:6a:d9:07:8b:33:1a:35:75:70:
b5:90:ac:df:9a:d8:97:c4:16:57:ff:0a:71:a6:06:54:7a:0b:
5b:1e:72:66:93:88:86:90:1e:d0:cc:a6:e4:9a:9a:4f:c8:37:
6a:58:0c:54:83:37:e3:ac:12:1b:06:64:41:52:96:64:db:45:
02:8b:4a:06:53:cc:ec:9f:88:df:f4:4b:7f:8f:2f:35:71:cc:
cc:8d:df:ad:1d:73:59:ec:27:00:ce:24:b7:4d:1d:98:de:a9:
b6:fa:fb:a2:b5:d5:47:bc:03:c4:25:d5:12:69:db:34:50:40:
7b:64:83:8e:12:b9:b4:d0:f0:57:44:9b:5d:c6:5c:95:3b:eb:
ea:49:14:c4:74:2b:75:c7:4d:e8:ce:bf:b1:c0:30:ba:6d:8c:
8d:49:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:45 2025 by rpki-client