Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: wkIfpoZ3ywy3u/eCoCrSSQSCjIg0baTCEB88uw4+pak=
Subject key identifier: 06:95:8A:2D:91:74:F9:A9:C6:3B:04:E1:0E:67:19:65:2D:AA:84:A1
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 01976B86186B4900D48A5CF9CEF41F139EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0F5A
Signing time: Fri 13 Jun 2025 23:00:39 +0000
Manifest this update: Fri 13 Jun 2025 23:00:39 +0000
Manifest next update: Sat 14 Jun 2025 23:00:39 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: XtCT97AhUlQwsdthMzEAPWR3H62ZF8+wJH3g3d22ed4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:18:6b:49:00:d4:8a:5c:f9:ce:f4:1f:13:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Jun 13 23:00:39 2025 GMT
Not After : Jun 14 23:00:39 2025 GMT
Subject: CN=06958a2d9174f9a9c63b04e10e6719652daa84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:89:5e:b2:77:1e:e9:2a:0c:79:d1:ff:53:
5d:22:ff:12:70:92:8c:d4:c6:de:af:cc:98:8a:f9:
27:84:cc:a6:e2:b6:66:4b:7f:55:5a:cb:63:db:60:
ac:e2:81:3b:d5:83:c5:57:98:49:16:2f:17:c4:ab:
5e:9f:4e:ab:1a:5f:a5:ac:d7:c3:d4:7a:84:bd:3d:
7d:d6:48:12:4f:eb:28:31:71:28:05:a0:d4:2f:25:
85:fd:e0:1d:c0:20:16:fa:31:c8:17:ff:84:80:e3:
90:4e:f7:1a:f2:15:6f:14:db:24:98:7f:35:2b:63:
44:40:e8:4b:3a:5c:50:72:4e:71:96:05:a3:3c:ed:
93:f2:a4:49:e1:a1:55:e9:c8:c1:89:47:67:ca:a9:
ff:2f:b0:bd:01:6b:d1:48:9f:54:f5:5b:3b:e3:90:
6c:23:d6:6d:0d:2e:bb:81:13:55:62:fb:35:bd:28:
48:fe:40:9d:f9:7c:d0:21:0f:67:4d:9e:83:85:8d:
c5:a9:43:aa:b8:33:49:83:67:bd:5a:c2:27:98:bd:
51:9e:89:1b:a0:02:33:cd:de:04:47:ea:74:26:2f:
bb:34:5e:34:fb:4c:4f:a6:16:af:0c:01:09:11:70:
f7:93:cc:3d:6f:e6:a5:94:29:4f:fe:d3:92:1e:ed:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:8A:2D:91:74:F9:A9:C6:3B:04:E1:0E:67:19:65:2D:AA:84:A1
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6a:c2:cb:b7:aa:2a:ca:00:09:51:cd:e8:e3:c1:d9:33:1a:
e8:1b:ca:d9:de:13:09:83:c8:77:48:5a:25:3c:a9:2c:e4:58:
94:0c:09:be:69:8d:f0:9e:bf:bd:9d:9a:22:74:06:9e:f4:ce:
d7:cb:3d:87:73:1b:72:17:56:ce:af:c4:c5:f5:40:24:b9:14:
f5:18:fe:94:2b:e5:42:c2:b9:a0:ef:ec:51:57:33:2d:00:5b:
3a:e8:31:82:25:81:80:f9:94:fb:97:e6:e0:3d:c6:20:93:31:
f3:c1:8c:6c:08:3e:ae:8d:00:a9:00:90:de:87:e5:bd:27:69:
ab:9e:18:d5:78:54:09:ce:12:98:c6:38:f7:1f:42:58:d5:13:
e2:d7:24:ef:e7:fc:f3:02:f1:db:87:7b:a6:49:0c:cd:32:1a:
df:17:8b:31:be:a6:91:a6:70:b4:74:90:db:8f:e0:a0:aa:8c:
9d:2d:c5:5c:56:b5:a3:25:db:a1:a8:26:1b:46:ef:1c:a5:29:
03:ed:31:fb:04:75:06:c2:57:75:27:53:28:72:c2:91:9b:a6:
e8:b7:01:56:3a:c2:e7:de:51:08:a1:cc:f7:3d:b2:6f:79:72:
34:a9:f8:aa:78:aa:df:ef:27:9e:e3:82:49:7d:57:a9:f1:21:
58:74:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:36 2025 by rpki-client