Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: jqMtqT0tFsvHpFjIenxHOGO+Ni4CAZT++yqTuSevZC8=
Subject key identifier: B9:C0:D9:58:C9:DA:42:53:AE:A4:A1:FE:B2:F4:50:81:35:58:34:99
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 01976C992907DE1EDE1967AFE80B2091A8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0A8A
Signing time: Sat 14 Jun 2025 04:01:06 +0000
Manifest this update: Sat 14 Jun 2025 04:01:06 +0000
Manifest next update: Sun 15 Jun 2025 04:01:06 +0000
Files and hashes: 1: eElEamJRXa34pPUYDX_wsosnFjg.roa (hash: A2iUP3CvC18fDfjURHdEPTZmoR2njRzEuhMxjf7TGDQ=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: y11lsNvGIK0gBp6jlO6spSrNxP1iHsSI31vRtyAzmMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:29:07:de:1e:de:19:67:af:e8:0b:20:91:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jun 14 04:01:06 2025 GMT
Not After : Jun 15 04:01:06 2025 GMT
Subject: CN=b9c0d958c9da4253aea4a1feb2f4508135583499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:2d:dc:46:e9:ad:48:5a:db:2c:71:97:6e:
b5:d2:69:9a:9a:b9:f8:be:1a:eb:af:80:1a:6f:2b:
c4:85:f4:8d:83:6a:fe:3e:75:19:56:7a:37:fa:6d:
4b:73:cf:6c:a8:16:5a:fb:8e:c0:fb:5d:e6:b7:e6:
59:72:c7:54:e1:4c:72:b4:a4:e6:07:8d:ff:68:d2:
f8:32:f3:2b:b5:1f:4a:7c:f1:a3:20:e0:6c:40:b8:
61:34:84:18:1d:b3:3f:41:6c:23:19:e5:60:6e:40:
54:58:81:67:32:1a:32:70:d6:0f:91:6d:64:99:8d:
40:f4:3b:e8:b9:31:a0:fb:84:79:cf:60:ad:7e:e7:
9e:e2:c5:d4:b9:1a:2b:95:19:ca:2f:d0:24:d1:67:
5a:32:1c:c7:96:c7:2a:72:99:1e:03:c5:09:fe:c5:
89:6e:40:26:eb:a9:17:70:08:9e:c6:69:12:bb:00:
7b:aa:47:5e:e3:0c:45:ea:25:fb:9e:f0:60:00:f2:
33:51:b8:ca:c1:cc:48:06:38:d0:03:c5:cb:ce:17:
73:be:79:45:d7:4b:25:6e:87:20:75:ab:69:68:e7:
95:8b:51:66:aa:d7:80:0b:1c:5f:d8:66:cf:0d:ee:
13:c1:26:4d:fd:ec:4b:05:18:ce:42:84:e5:30:f4:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:D9:58:C9:DA:42:53:AE:A4:A1:FE:B2:F4:50:81:35:58:34:99
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:1b:6c:47:47:79:be:4a:89:dc:48:77:af:50:a3:93:e9:
b0:d7:76:56:22:d0:2c:cf:8c:9a:9b:55:8c:56:00:81:42:6f:
3e:58:07:f5:b1:89:5b:29:e8:92:9f:73:08:96:b7:8e:39:f5:
81:14:1b:43:6a:82:7a:d3:6e:e9:47:41:5e:98:ed:4a:df:9e:
af:87:2f:be:87:01:0f:eb:8d:7e:d6:ff:84:9d:dc:77:4f:35:
0d:97:c9:ca:93:cb:51:7d:a2:41:ad:19:17:f9:d8:5b:a4:b4:
54:98:52:c4:4a:7f:27:b5:91:9a:43:9e:99:8d:f5:bd:f5:f3:
71:2a:b8:fb:ee:4c:86:23:91:10:38:e2:52:a4:ef:19:f3:fe:
23:34:82:6e:97:8b:83:d1:95:41:4f:ac:01:fa:21:ed:d4:80:
67:7d:fd:96:e0:0d:f5:6b:01:d8:c1:cc:e1:be:15:fd:16:25:
ba:a7:08:65:80:39:c6:3f:a5:a6:58:d8:9a:c5:b8:43:68:68:
fd:8c:89:0d:5d:bc:6c:a2:11:94:fa:f5:e4:fe:50:e3:90:ef:
06:e2:99:cd:ad:3e:a6:f2:76:6d:e5:26:c1:cb:23:68:ab:9e:
15:ba:e3:0d:ee:48:41:2f:46:29:5c:3e:e5:fa:27:07:20:e1:
1a:55:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:27:35 2025 by rpki-client