Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: vH8IerlB0D3KLlauJ6MIpyJfLZmpsved0WSG2T4bEGA=
Subject key identifier: 26:79:6F:3A:C3:18:15:A7:53:27:8A:8D:49:3D:E0:87:DD:F3:84:4D
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 01976D065A8A2AAEEC337ACAA99185675BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 12A7
Signing time: Sat 14 Jun 2025 06:00:22 +0000
Manifest this update: Sat 14 Jun 2025 06:00:22 +0000
Manifest next update: Sun 15 Jun 2025 06:00:22 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: G12Ws/pvl6c7t177R1V2xZnawRPQ/m7Gtv8QkYg6jSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5a:8a:2a:ae:ec:33:7a:ca:a9:91:85:67:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jun 14 06:00:22 2025 GMT
Not After : Jun 15 06:00:22 2025 GMT
Subject: CN=26796f3ac31815a753278a8d493de087ddf3844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1b:46:26:6b:d3:b3:a4:49:50:4c:a2:5e:1a:
9c:77:ae:af:0f:63:a9:64:d1:66:8a:ad:8f:fd:ae:
18:06:67:2d:3c:1a:28:ab:b8:85:be:a5:1f:ad:b1:
55:03:5d:f0:65:7c:88:ba:7d:ce:40:6f:19:1e:73:
19:60:f5:c8:cf:33:8d:bc:47:0a:87:2c:24:96:61:
d3:fb:61:cb:11:32:c7:74:3f:cb:aa:e6:1b:1d:de:
e1:30:ad:71:93:29:c5:98:85:ac:e8:87:60:48:15:
8e:08:6d:0b:7c:64:a1:4c:62:c6:9e:46:11:6f:82:
f8:7a:ca:c1:bd:59:28:a7:e0:4b:3c:38:d6:43:85:
63:45:03:74:66:41:e3:48:78:ef:4b:64:ff:69:21:
99:71:91:f3:57:98:82:42:6c:4a:04:3d:c1:f6:91:
d5:04:32:9d:dc:b8:ab:55:c5:b1:9b:b6:ef:0c:4a:
aa:db:6d:99:7c:56:64:5d:5c:8b:ea:82:1b:4c:4e:
aa:67:08:d0:60:bc:ca:02:e4:12:3d:8e:b5:cd:d6:
0f:64:f3:8a:eb:63:73:95:b6:f3:c3:15:2a:50:4c:
e7:13:ed:5e:fd:3a:8e:c9:76:35:f4:17:0e:b9:81:
68:ee:13:1d:5e:5f:6f:51:fe:90:e9:56:ee:f0:fa:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:6F:3A:C3:18:15:A7:53:27:8A:8D:49:3D:E0:87:DD:F3:84:4D
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:65:b1:da:0e:72:2e:b4:e8:e6:76:c0:d2:e4:39:1a:0d:8d:
70:74:2b:bd:a1:6f:e9:97:9e:28:ba:0d:74:29:88:a6:01:bd:
12:59:f5:50:16:1e:b9:51:b1:78:e1:ce:93:e9:b8:41:3f:ed:
38:9e:83:90:cd:2d:b2:3a:4a:5b:7c:b4:da:7e:5f:03:b7:81:
7f:98:44:98:c1:2d:d8:18:c0:4f:83:0a:4f:91:f3:6a:2d:ff:
2b:1a:48:e4:39:43:39:a0:e8:e1:13:03:17:e1:5c:83:04:54:
16:bd:a7:0e:66:ec:86:e4:e7:71:ee:24:4f:15:3f:59:79:db:
e0:eb:6b:a4:1d:9e:5f:87:23:6a:99:5e:b0:2b:fb:21:17:c2:
25:45:93:88:bd:7b:df:ee:26:a8:14:4f:28:f3:fa:fe:8a:95:
2e:b0:0b:10:34:5b:ef:a0:a9:04:a2:48:2b:73:82:74:f6:21:
d7:30:55:f1:d3:de:06:99:d0:8e:ef:86:b5:35:7a:e0:22:0a:
20:14:4c:e1:e9:08:8e:d9:57:af:52:a1:bb:5f:45:64:e0:a6:
23:25:a7:f6:4c:4c:c5:d1:49:5b:51:ec:c4:51:a1:3f:0f:08:
45:41:77:9a:da:4d:be:41:a2:32:1d:8b:95:7b:9a:4b:6d:e5:
0a:b9:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:49 2025 by rpki-client