Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: ehra7DG3QuuD7GlSPGkO+/gr6NdJqIBv48wY+nroKXg=
Subject key identifier: FA:80:17:12:61:42:5A:6A:C0:AF:19:9C:8B:28:37:ED:0E:66:85:C2
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019768F2DD0C7E1C0CBFC567158AB4B6ACD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0A42
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: G/ENf9Rsvbe2Lhc5u0McUPQM8/TUB84L/3GsLhFu9GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:dd:0c:7e:1c:0c:bf:c5:67:15:8a:b4:b6:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=fa80171261425a6ac0af199c8b2837ed0e6685c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:cc:6d:2b:b7:42:f7:e6:3f:ef:ee:20:06:
a4:a2:ed:3b:e3:1d:35:96:8d:63:7c:66:3a:de:44:
eb:36:51:5d:b0:c4:9b:36:4d:b9:88:da:82:7f:dd:
d7:0d:f2:43:4f:3d:b4:e4:91:cd:65:8d:f5:32:47:
2c:15:58:de:2b:37:e6:ac:65:2e:de:9b:08:a6:fc:
4d:23:78:38:55:97:f4:a5:76:6d:25:41:c6:87:4c:
ca:fc:96:a3:f0:63:51:27:7e:27:d0:5f:b1:1c:25:
70:1a:b2:c4:5c:c1:70:d1:9f:87:81:0c:f8:ee:8e:
19:cb:1b:b6:52:b4:78:22:85:c8:7f:f7:5f:5e:aa:
30:5b:36:fb:d8:f5:8c:0d:6d:e6:5c:54:42:92:26:
f7:cf:cb:85:b8:82:9b:ca:19:6c:95:58:4c:ee:d8:
21:2c:0d:19:af:21:39:21:c6:a8:3c:bc:56:f5:f3:
7b:c0:c7:a5:ec:c0:1c:f3:81:bc:55:c2:5e:5b:bb:
47:6e:4d:cc:24:81:dd:22:52:dc:12:c8:73:fe:76:
91:8f:94:4c:b8:59:50:ea:b3:73:c8:90:db:33:be:
3a:1a:83:97:28:a8:a8:ce:7e:58:32:85:43:92:ca:
3e:0e:6d:d0:7f:80:9c:ff:64:43:d1:16:42:5c:7e:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:17:12:61:42:5A:6A:C0:AF:19:9C:8B:28:37:ED:0E:66:85:C2
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ce:f3:a7:fb:39:4b:22:86:7f:4e:06:9f:3e:14:a9:05:c0:
e1:7b:82:9b:30:0a:d9:d6:19:96:e6:68:23:8e:83:60:b0:c0:
f8:c4:65:75:b0:92:67:1e:8c:a7:13:28:89:3f:ea:d0:87:f4:
b8:eb:d2:8e:3b:69:1c:0c:f0:98:d9:63:46:71:3b:78:06:ff:
27:d9:87:69:9b:47:7d:ef:85:80:9b:7a:d9:eb:4f:73:e0:b6:
9c:38:4a:16:10:7c:ec:03:e2:d8:6e:dd:ea:c8:65:c9:1c:a4:
a1:42:47:d2:c3:b2:63:e2:93:cb:89:fd:7d:12:2c:39:44:43:
40:ea:bd:e9:c8:51:4d:85:0b:82:89:f7:ba:c3:59:79:f0:37:
ca:ba:28:c5:cc:d7:38:3e:84:3c:28:4e:30:06:6d:14:7a:d0:
66:8a:0c:51:25:bc:5d:43:20:fc:6e:00:d3:70:1b:4c:d7:5e:
ae:49:16:05:32:a1:1d:4f:dc:a9:c4:89:3a:69:ea:66:60:06:
60:7f:fd:5a:61:90:49:2e:65:39:f8:00:b1:e9:4b:40:89:50:
70:1d:45:44:67:1e:92:a3:35:b2:81:cc:46:aa:0e:4d:68:94:
a8:ff:52:2a:73:f3:f5:a6:a6:a5:09:0e:91:10:ac:27:cc:83:
ce:63:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:09:46 2025 by rpki-client