Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: 6eSv2+X6qYrzLMlz6M6Ar0ODzns5VDdhbGal4v2OBZc=
Subject key identifier: 39:32:9E:C3:0E:40:DB:13:5E:DB:F4:87:27:8B:7F:AE:E6:A9:DE:D0
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 01976D065D1C04694EE908AADB5436D4C95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 139F
Signing time: Sat 14 Jun 2025 06:00:22 +0000
Manifest this update: Sat 14 Jun 2025 06:00:22 +0000
Manifest next update: Sun 15 Jun 2025 06:00:22 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: CBPjrTYsQiyYFm6+giTgNdStEbvhjZuWWt4VG7Uw/30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5d:1c:04:69:4e:e9:08:aa:db:54:36:d4:c9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Jun 14 06:00:22 2025 GMT
Not After : Jun 15 06:00:22 2025 GMT
Subject: CN=39329ec30e40db135edbf487278b7faee6a9ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:5c:eb:a9:b4:b4:08:79:e1:aa:a9:13:57:
b5:07:77:b9:a9:d0:73:e5:3b:9b:00:c5:f4:93:dd:
67:23:8a:9f:58:db:0a:5f:36:3c:3e:5e:d9:92:3f:
5c:93:16:0a:c8:2d:d8:8d:da:c8:cb:8e:47:6c:8a:
76:65:73:9f:b4:ec:78:fb:be:73:ce:27:28:69:f9:
52:40:15:a4:46:b8:65:84:54:63:6d:79:03:fe:31:
4e:39:17:bb:66:5f:00:24:9c:a8:56:1b:99:3b:6b:
79:46:2a:19:2c:68:81:0c:20:4d:83:48:6d:6e:25:
9b:a7:fb:52:a6:86:a9:5c:2c:d9:0a:ee:d3:99:3c:
47:c6:2b:25:68:52:77:7a:90:f1:21:af:8a:f0:66:
6a:39:af:1b:ce:a4:97:19:c2:86:7c:7b:5a:e0:bc:
80:96:2a:86:45:9b:74:c8:c0:aa:62:be:62:57:8d:
1b:2b:f4:5f:2a:0e:b8:14:ac:cf:59:dd:35:f9:8d:
e0:ca:2a:33:83:f2:9d:1b:ef:c6:14:8f:71:14:5f:
78:b1:f8:e7:e6:0e:97:c2:96:d9:de:b7:d0:b0:b7:
cc:19:9e:4b:44:b7:93:4c:48:db:6c:41:39:73:d0:
48:49:89:eb:a8:27:eb:14:d1:b9:65:bf:57:12:3d:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:9E:C3:0E:40:DB:13:5E:DB:F4:87:27:8B:7F:AE:E6:A9:DE:D0
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d8:5f:47:9b:08:f8:86:ed:08:37:fc:3c:94:3b:a2:55:8a:
80:f2:aa:12:cc:29:1b:4a:b6:8f:d1:32:11:74:61:21:2b:57:
b8:a4:2c:32:14:e7:e1:4a:3c:af:28:a1:5d:fb:78:87:59:87:
e3:4d:63:9e:68:40:2e:ec:b4:1a:a0:31:d4:91:7b:2f:8b:f3:
7c:ac:06:a9:0f:e4:c3:bc:5b:99:b2:04:4f:c9:5f:c1:bd:54:
cb:bb:b0:f2:25:23:3e:0e:75:5a:d1:98:00:45:83:05:d3:09:
4c:a8:3f:67:a4:ea:b7:3d:ab:c9:b4:80:e3:cd:78:47:0f:6b:
d1:21:48:53:46:26:c4:04:fd:af:b7:6f:23:1b:76:3c:d9:ba:
6f:d1:e1:32:f3:f7:59:f7:b6:99:2c:7e:13:3b:b9:45:7d:47:
0f:5d:fe:94:a6:d8:46:e8:38:1f:b6:91:87:2b:b4:b8:1c:52:
04:b3:80:cc:46:c3:3a:e0:c1:a6:de:cb:b7:0c:ca:61:0d:e3:
8d:ad:0a:cc:b5:35:a9:2c:5c:aa:9b:6b:11:de:ab:1a:df:43:
13:db:6b:f2:de:d5:64:1f:a4:7a:c0:24:bb:b8:97:a7:4f:9e:
0d:76:b0:d5:03:8e:66:a4:53:48:82:03:75:3c:fc:87:14:56:
5d:98:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:36 2025 by rpki-client