Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: KSCP+TbMK4mLjSwcFrgKoCTO9W/t4cdc0krPy83Z8FQ=
Subject key identifier: 74:47:39:B7:F3:B0:3D:E4:8E:6D:A9:38:4B:1C:6F:79:61:B1:D6:95
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01977D1EC19149391CE2538047708ECB2FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1593
Signing time: Tue 17 Jun 2025 09:00:56 +0000
Manifest this update: Tue 17 Jun 2025 09:00:56 +0000
Manifest next update: Wed 18 Jun 2025 09:00:56 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: ubefFhMbv05KYwLVEbdUL2tjDE327X6FNSZSc8lrXsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:c1:91:49:39:1c:e2:53:80:47:70:8e:cb:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jun 17 09:00:56 2025 GMT
Not After : Jun 18 09:00:56 2025 GMT
Subject: CN=744739b7f3b03de48e6da9384b1c6f7961b1d695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:b4:93:a8:73:62:c3:a0:a0:3c:ec:c6:77:
9c:76:37:b8:40:de:c0:f3:ed:00:84:3a:43:cc:9e:
1c:d4:bf:38:55:b5:3c:5a:37:47:f6:fa:fa:d5:b8:
83:31:5e:c8:88:64:16:ab:83:62:ed:8b:2c:35:70:
f1:d1:1b:b8:87:28:aa:43:73:ca:1c:ab:22:05:42:
90:33:ba:86:86:65:76:ec:50:42:a6:6d:44:55:cb:
07:16:de:b1:21:2b:04:33:01:a0:30:fb:c7:4a:9f:
46:e6:f7:82:c8:2f:b4:f6:e6:44:50:b7:d4:9a:3d:
3e:72:f7:d0:77:42:97:89:3d:5b:20:39:0b:11:0e:
e6:7e:67:6c:75:56:61:71:e3:2f:f9:c7:2c:0d:ed:
10:36:fc:e9:44:5a:38:e5:d0:21:34:4e:f0:7e:ba:
64:c2:53:2a:41:1e:0a:c3:d9:b8:68:85:69:6b:d0:
a2:99:15:3b:84:a2:62:bb:90:b5:80:7e:cb:71:06:
70:a5:b1:55:16:e1:42:5f:fb:8f:dd:89:cb:e6:01:
15:3f:e8:57:94:b4:dd:77:2e:7e:5a:8f:31:b3:ea:
0f:f1:91:a6:55:c3:2b:43:a4:f6:b3:39:ab:99:a8:
84:de:3d:db:6e:d1:8e:50:52:c5:ed:04:97:81:bb:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:47:39:B7:F3:B0:3D:E4:8E:6D:A9:38:4B:1C:6F:79:61:B1:D6:95
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:06:65:35:37:60:08:df:88:a7:4e:7a:bc:3e:5d:70:5a:
90:cc:af:fb:ff:6d:d3:a9:fc:71:ac:74:a3:b7:ec:b0:14:24:
f6:7c:00:55:4c:47:52:40:eb:ee:ed:90:48:d9:a4:9d:0d:7f:
1f:b6:db:92:00:06:91:ac:43:3d:2b:7f:8f:08:dc:53:41:d5:
f1:04:6e:bc:27:d0:27:b1:76:0b:50:5b:4a:15:8d:6a:4f:56:
1d:05:72:b6:a7:e2:20:0e:eb:b6:78:d8:14:b7:00:24:17:98:
0a:16:f8:cc:e5:73:f5:6f:e5:6e:26:77:d1:9d:52:d1:df:cb:
b3:4f:95:db:ea:f8:e6:c2:fe:d1:d5:67:2c:3c:74:af:d4:76:
a3:88:24:a1:e7:a0:67:e3:13:a5:bb:fc:ae:58:96:e1:57:5d:
34:95:cd:96:9f:17:2a:72:8d:93:cd:9c:1c:12:e7:d1:57:36:
1f:07:27:42:f0:5c:89:ea:cc:62:66:fe:12:ce:fe:37:4b:92:
7c:89:60:1b:c3:13:30:08:9f:c3:7d:b5:e4:9d:ce:9d:81:99:
a7:a4:be:b8:25:a3:e5:ca:1e:e7:9b:c6:b7:5a:14:2b:9f:8e:
c7:b5:e3:b0:8b:bc:b2:67:c3:d6:d4:35:77:ea:53:ae:f0:b1:
0d:5f:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:14:50 2025 by rpki-client