Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier: jD5xDz2Gis5UGZuMjexilJEWj/K29R2n+Z6yqbow8jI=
Subject key identifier: 65:01:9A:2C:20:A8:60:9E:F6:A9:AF:01:B4:D3:CF:16:42:57:04:61
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 01978320E001112A6BF4CBD1FCF7D1E5226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number: 048E
Signing time: Wed 18 Jun 2025 13:00:59 +0000
Manifest this update: Wed 18 Jun 2025 13:00:59 +0000
Manifest next update: Thu 19 Jun 2025 13:00:59 +0000
Files and hashes: 1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: v3p5AVC4O6/URXTxk4IPJ34Rn39hVQkVZiBN6VYWjU4=)
2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:e0:01:11:2a:6b:f4:cb:d1:fc:f7:d1:e5:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: Jun 18 13:00:59 2025 GMT
Not After : Jun 19 13:00:59 2025 GMT
Subject: CN=65019a2c20a8609ef6a9af01b4d3cf1642570461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5c:c8:7c:c2:df:c6:44:0f:70:19:f3:05:2c:
be:00:f6:dd:96:cf:f6:9f:25:53:33:b2:5c:5a:1d:
80:30:c1:ba:32:a0:52:3c:a1:6f:76:04:48:c6:aa:
ee:3b:4d:05:c7:87:1c:3e:db:d7:0d:95:2b:ce:d7:
82:68:88:fe:08:71:95:46:f2:10:a8:8d:52:a9:87:
1e:5f:5b:23:0e:ef:4d:c7:ca:c8:43:80:d3:53:03:
f0:0f:0a:55:4d:25:3f:a3:09:59:14:e5:d2:ac:77:
93:c7:b5:54:f7:c8:4a:c0:d2:17:e1:25:a9:c3:ef:
7a:1e:2c:d6:2a:64:ab:46:1f:a9:e6:ac:08:12:89:
8e:a4:ff:4d:45:b7:93:8a:0d:b5:43:71:36:97:39:
db:16:d5:55:45:12:b7:bf:4c:25:48:b6:14:90:7e:
33:52:6f:58:64:16:dd:a4:b6:46:4d:3e:ea:38:fd:
a7:70:bb:4b:7d:87:e5:de:8c:38:2e:fd:f4:39:fa:
c1:46:9e:f5:97:35:29:ef:08:19:d1:12:82:b7:86:
eb:a1:8f:7f:1c:6a:04:63:df:73:37:21:63:06:60:
e3:76:07:f0:aa:d4:c1:82:8c:3a:d1:b9:44:80:3e:
cc:e0:f7:c0:ca:20:e4:6f:db:78:c7:c5:33:f4:4d:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:9A:2C:20:A8:60:9E:F6:A9:AF:01:B4:D3:CF:16:42:57:04:61
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:9f:9a:3d:e6:10:51:81:26:97:64:27:80:e0:e4:fa:13:
23:49:34:f9:0a:0c:4b:0e:74:0d:13:9e:cc:34:69:f8:5b:08:
f7:2a:e5:e0:5f:30:ff:b9:0d:c7:98:2e:31:f7:36:ec:0a:9e:
67:45:9f:dd:07:b9:40:7f:f3:71:38:60:bc:52:78:0c:3a:5f:
66:ea:33:54:bb:d9:30:1e:6e:92:87:be:47:f7:ac:a8:74:a7:
c0:7c:fe:01:12:41:54:c5:21:70:da:ec:24:ff:4b:30:02:7d:
96:fe:48:f1:51:c9:49:1d:f3:7f:78:b8:c3:66:96:9d:a6:05:
95:28:1b:be:8f:45:95:78:48:f1:03:0d:89:0e:a8:6c:8b:7d:
89:00:e2:85:29:56:47:02:27:27:0a:28:81:6a:a2:aa:a9:2f:
9b:f0:39:0c:97:fe:e8:b5:ae:2d:f4:91:81:35:80:6f:6f:19:
a4:71:61:01:5d:e8:d6:11:d1:40:c2:49:51:51:65:99:23:b7:
66:da:f1:ca:d1:c0:cb:30:d7:50:c2:cb:e3:cb:9a:0d:95:51:
6c:df:51:1c:86:56:6c:09:6d:30:f8:08:47:44:53:e8:b6:2c:
75:55:d6:61:b1:6f:1d:9d:ff:dc:f2:7c:82:0c:25:2b:d2:d0:
ed:3c:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:24:09 2025 by rpki-client