Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: 1DjTIyQD4eZsQRrVNJHzssjVo3x1BtIkPCPkvJbyFjA=
Subject key identifier: E3:3A:76:0A:E3:E7:41:3F:67:83:62:E6:FD:1A:62:AA:10:F0:FB:F6
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 01976D3DD41F98764FE5FB3232EE19C37E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:00:57 +0000
Manifest this update: Sat 14 Jun 2025 07:00:57 +0000
Manifest next update: Sun 15 Jun 2025 07:00:57 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: IKOb4L2sQsRrnvBBV1vhpSf1TccdtyjTDh3C1A4Zo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d4:1f:98:76:4f:e5:fb:32:32:ee:19:c3:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Jun 14 07:00:57 2025 GMT
Not After : Jun 15 07:00:57 2025 GMT
Subject: CN=e33a760ae3e7413f678362e6fd1a62aa10f0fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:d7:13:aa:74:40:c3:a5:08:fe:9c:ae:83:
af:6a:c4:41:9c:98:a1:9c:aa:0f:96:3c:27:11:25:
5e:1d:5b:5d:d6:74:9c:5f:29:3f:1b:c1:e0:cd:c2:
20:7c:f6:86:99:9b:b6:61:b8:3f:8c:df:48:2f:48:
7c:c0:e2:d6:0c:e4:16:bc:74:a7:0d:80:7e:d9:75:
a8:3f:47:65:63:0a:11:7e:11:65:be:03:e5:db:1a:
d0:2e:db:8e:21:e1:6d:24:37:c7:7b:80:23:56:67:
ab:fb:19:d0:11:21:82:7e:94:52:09:a0:86:eb:21:
26:c4:de:59:47:13:74:39:17:53:87:da:6a:02:c3:
1b:68:a7:7c:5f:7e:91:ae:cd:22:0d:46:24:1c:3d:
68:5e:e6:0a:1f:b8:42:f3:28:45:db:82:df:7c:c9:
76:3a:6d:0a:e5:ff:b0:0e:30:34:11:3c:a5:bc:40:
e9:88:12:80:a1:82:e4:f1:6b:e3:a5:5e:f1:cb:99:
6c:21:24:cb:9b:2b:76:f6:24:23:df:b9:f0:e4:f7:
35:fe:77:32:a0:49:ca:b3:6e:c8:ab:cb:e4:a9:ea:
85:e5:12:9f:26:65:ad:64:cf:18:25:4e:e2:49:c4:
31:d6:c7:5d:76:b7:81:53:6c:c5:e6:df:7b:1e:13:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:76:0A:E3:E7:41:3F:67:83:62:E6:FD:1A:62:AA:10:F0:FB:F6
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:28:76:cf:a8:37:6c:81:32:3a:03:03:57:8a:9a:4f:6b:ed:
62:6b:8c:89:d3:79:4f:58:99:ff:58:07:63:30:7f:d3:b5:28:
d3:c1:f8:83:4a:57:ed:ec:f5:53:8a:7a:dd:3a:f1:da:cd:6b:
42:b7:b2:d3:b4:e3:b7:39:3a:fc:0d:98:5f:6d:a3:63:96:35:
5f:90:51:52:0b:72:64:96:b5:9a:82:3f:41:64:a3:cf:fe:38:
c6:14:3f:3b:92:f4:fc:38:1d:e2:52:fd:85:84:7f:b4:f6:c7:
46:f2:ec:e1:5a:c3:26:c1:65:a9:23:1c:93:8f:70:07:99:9f:
5c:71:af:63:b9:4b:98:e2:af:e0:09:96:16:54:52:16:6f:53:
57:03:3a:b7:df:23:2d:f1:50:6b:0e:0f:94:a6:04:8a:0d:e2:
85:be:47:78:73:0a:93:e5:2f:8a:51:be:1b:4d:cd:95:b1:15:
7f:da:30:61:2f:17:f1:57:46:b2:bd:2b:dc:d2:f3:fa:37:14:
50:6f:49:94:f2:99:58:40:92:46:c2:75:de:20:7c:26:f5:9f:
11:6d:a9:aa:f1:19:79:7a:8e:69:35:8c:69:fc:b2:6d:bd:bc:
30:7b:5e:ba:aa:da:96:0f:e8:37:3d:d6:48:a7:fb:df:4c:ec:
db:fe:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:37 2025 by rpki-client