Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: uHdj5mnYH8rrqfeQV+2a46dZAmwhDtPfBXtI1cOJqZw=
Subject key identifier: 75:6E:AD:A6:68:46:28:EE:5E:93:02:C0:74:60:20:4B:72:00:A4:B3
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019770E37552E3153D8001EAB7B025C1967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 061A
Signing time: Sun 15 Jun 2025 00:00:44 +0000
Manifest this update: Sun 15 Jun 2025 00:00:44 +0000
Manifest next update: Mon 16 Jun 2025 00:00:44 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: qs9zms+Ax71GOl/+yzVHYWN21Xi4MS7Cgmxuka5MSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:75:52:e3:15:3d:80:01:ea:b7:b0:25:c1:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Jun 15 00:00:44 2025 GMT
Not After : Jun 16 00:00:44 2025 GMT
Subject: CN=756eada6684628ee5e9302c07460204b7200a4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:1d:78:6c:00:ec:37:f0:90:32:cf:e0:0d:
a3:ca:51:25:ec:0f:e0:2e:ab:39:ee:70:fc:a7:85:
a0:75:9f:8b:d4:6e:c3:43:76:b9:b4:4a:cd:18:57:
f5:d1:6a:72:f2:61:ae:71:04:ca:c3:8e:ef:88:80:
01:62:f3:dc:69:eb:c8:b9:30:67:eb:0e:6f:89:41:
63:c8:bb:2d:bb:6b:77:cb:8b:68:b1:12:bc:cb:23:
d6:bb:fe:60:48:7f:2a:ad:6d:82:4f:51:21:e8:5b:
1f:e1:6c:3c:17:5f:68:8c:2e:b9:ee:e2:17:22:7d:
3d:1c:29:43:94:4b:d6:e3:65:fb:24:cb:24:dc:7a:
ec:62:71:d8:43:6a:19:e9:eb:24:c5:48:1e:fb:e3:
20:7a:2a:c4:26:e5:ab:fd:14:56:30:ac:09:1a:9f:
44:36:cd:db:a1:7d:9b:ea:74:76:5d:15:46:84:67:
57:62:87:9c:53:b9:7b:c9:a1:a4:ef:cb:dd:d3:24:
7e:c7:9e:16:21:f9:0f:b4:2b:a0:b8:dc:11:9a:5a:
59:31:8c:ee:10:26:c3:64:a5:8e:52:fd:6d:49:1a:
6c:17:6d:57:61:a3:fd:22:a7:c4:74:a0:68:d4:2e:
c3:4d:8f:fc:4e:c8:a8:11:90:ab:be:b4:0f:64:1e:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:AD:A6:68:46:28:EE:5E:93:02:C0:74:60:20:4B:72:00:A4:B3
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fd:fa:24:13:54:b7:cb:97:f2:bc:84:52:d2:8d:18:9f:07:
9b:80:48:be:56:17:ce:f4:56:df:75:d7:40:e2:d2:44:1e:1a:
d9:79:7f:af:65:ad:b8:04:f2:bc:86:c0:8a:cf:db:5e:8e:6c:
9a:7c:ae:99:3d:f5:f6:22:de:74:26:3f:66:64:29:90:cc:3b:
25:6a:8d:49:d8:26:42:2f:c9:46:7e:cc:76:59:8c:91:4a:63:
b3:c5:c4:cd:a5:0f:99:be:5f:49:a1:04:b6:4b:33:a2:dc:87:
8b:87:06:71:d8:8b:9c:d8:15:2c:57:41:e3:d1:b9:4a:5c:1e:
e7:df:a3:3a:4a:a5:a4:f0:7a:a2:6e:f2:4f:83:69:95:34:5a:
a9:1f:45:d1:2a:3c:a8:dc:9a:e2:bf:36:90:8f:c0:01:cc:7c:
80:06:2c:a8:60:6e:ca:6c:5c:c3:dd:e4:7b:2f:9f:c0:be:b1:
d6:cf:2f:f7:94:b5:2b:ec:15:d8:fb:44:f3:a2:92:8b:25:5a:
7f:5e:77:43:9c:42:d1:85:d0:ae:3c:47:fd:36:17:27:02:11:
25:c9:54:e0:c2:63:cd:8e:e7:f1:3a:e5:c4:f2:88:fd:71:e9:
6e:96:14:a0:57:6a:25:c0:0f:7a:90:5d:34:a1:f5:1c:2b:26:
7a:56:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:47:58 2025 by rpki-client