Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File: l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier: /mNB4QH2Nz+lh7kY08933uJ5h+y7XyG+u/AqubNXbNQ=
Subject key identifier: 11:55:C8:1E:7A:7F:EE:2B:6D:2C:C6:1D:26:16:7B:61:58:A4:53:58
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 01977F0CD83D6D09E4EBFE22BDFA463BED2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number: 0CCB
Signing time: Tue 17 Jun 2025 18:00:37 +0000
Manifest this update: Tue 17 Jun 2025 18:00:37 +0000
Manifest next update: Wed 18 Jun 2025 18:00:37 +0000
Files and hashes: 1: WOmDR0gkDYsuG9Soke-w2reYe2g.roa (hash: qNbo7JrQ2MwJmZEbIhGXbA+hRsU9tW8mGt+CExNZuso=)
2: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: OIpqxEJdGXSrlOLpXcYAqasFmeOIuuLie/EEW6ovuz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:d8:3d:6d:09:e4:eb:fe:22:bd:fa:46:3b:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jun 17 18:00:37 2025 GMT
Not After : Jun 18 18:00:37 2025 GMT
Subject: CN=1155c81e7a7fee2b6d2cc61d26167b6158a45358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:03:dd:e9:88:c3:ed:bf:17:1f:df:86:2f:
32:c2:4f:f0:11:4c:ba:80:26:a0:5d:c8:2f:1f:d6:
b0:bc:56:1d:f6:52:8d:df:14:55:35:0b:94:00:23:
d9:9e:ad:79:56:28:69:58:4e:e9:d6:a5:c6:c0:97:
17:59:11:31:dc:c9:12:0b:a1:59:9e:ab:c2:cd:b4:
b5:e2:ff:d9:f1:84:8d:82:5a:ad:f1:68:04:3e:1a:
ed:5a:2b:4f:55:da:2a:ae:5a:86:1f:f4:ad:e1:0d:
63:ba:96:22:ce:14:13:dc:99:d6:d5:8f:c2:cf:a4:
59:0f:7e:d8:91:fa:2c:e1:97:da:8d:60:38:20:1a:
5f:0a:65:3d:c1:28:d8:91:e3:9a:7a:42:d2:85:ad:
c5:71:f6:dd:a7:d0:5b:44:80:1e:a4:5f:54:56:70:
65:be:a3:95:50:62:b8:9d:a0:f6:2b:15:8a:06:62:
68:ec:a3:16:5c:a1:71:67:f3:41:56:23:ba:de:92:
4a:7d:e8:49:3a:b6:b4:11:11:24:b3:70:47:ac:3e:
07:8e:fa:cd:77:ba:4b:5a:04:82:83:a0:d4:b2:8f:
cd:6e:0b:db:38:ec:6a:80:89:d4:12:65:e4:b5:98:
e9:67:c2:df:df:64:c1:87:d7:6a:1f:9a:60:aa:d8:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:C8:1E:7A:7F:EE:2B:6D:2C:C6:1D:26:16:7B:61:58:A4:53:58
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:03:5b:4c:1e:39:a6:1e:91:a5:59:da:48:1c:5e:59:f7:5e:
08:f8:14:76:86:04:7a:66:6d:98:56:85:7a:28:d7:ef:12:38:
fd:26:1f:19:b8:0c:1e:7f:66:9a:8a:4e:f2:ef:87:bf:a2:47:
74:78:77:2e:de:13:21:78:a5:5f:05:b4:c8:48:27:f7:be:2a:
8c:9d:7c:15:09:b9:9b:91:c3:6a:f1:88:0f:f0:2f:f6:ae:4e:
b2:1c:22:f7:ad:b5:a8:0c:b4:cc:aa:ea:03:ff:2e:b5:f8:87:
e6:8e:c5:e1:b1:9c:d3:8f:3b:0f:a9:52:5d:22:3e:23:24:c0:
08:fb:da:c5:6f:96:57:6f:28:2b:b0:ad:56:7b:20:9b:48:a0:
ed:d9:31:80:48:16:1a:9e:89:f4:ff:5b:64:0a:86:af:35:82:
fd:b0:06:18:0f:d1:fa:bc:a7:30:5c:d2:fd:e2:36:7f:87:c4:
37:e9:6c:fd:8a:0b:d2:81:bc:db:b3:91:6d:dc:cb:5b:3c:36:
b7:6a:0e:b2:65:a9:18:05:fa:45:22:ee:3a:ce:fc:ba:47:43:
63:50:a5:84:89:18:01:89:9c:5c:82:a7:58:74:0f:cf:49:cf:
20:df:84:24:c7:21:18:70:9a:67:1c:8d:ad:44:5f:e7:53:a1:
35:00:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:54:57 2025 by rpki-client