Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: m0I1edSLXcQ2UtY9FyJECfodhJpAvIyKaE4p1cgUu9g=
Subject key identifier: 10:89:D2:A8:83:F0:17:60:F9:9C:61:D9:5F:D8:88:23:74:56:5D:77
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 01976D3E34B6857A440484581E21F3AC7391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 1575
Signing time: Sat 14 Jun 2025 07:01:22 +0000
Manifest this update: Sat 14 Jun 2025 07:01:22 +0000
Manifest next update: Sun 15 Jun 2025 07:01:22 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: 1w9BclMIroLmC3r5LO3PedKDLQoNsUIApoGM1RGe5jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:34:b6:85:7a:44:04:84:58:1e:21:f3:ac:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Jun 14 07:01:22 2025 GMT
Not After : Jun 15 07:01:22 2025 GMT
Subject: CN=1089d2a883f01760f99c61d95fd8882374565d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:7f:fb:69:59:cb:b6:e7:28:4a:9e:5e:ef:
d6:d2:b2:cd:c9:39:e6:1d:0f:64:fb:03:f4:a2:12:
58:16:03:85:ee:2c:df:96:d0:4e:18:b5:6d:09:1e:
a9:80:b4:5a:f8:00:81:8f:32:bc:7c:cd:e7:82:d8:
e5:44:97:05:17:95:08:40:6a:8f:18:8e:aa:71:d4:
30:d4:34:fc:cc:fb:fd:6d:84:9c:7a:6f:f9:80:b6:
fc:18:66:cf:86:52:d6:20:45:bb:7b:db:dd:92:95:
82:52:a7:63:d1:b5:20:6d:c2:70:2f:b6:05:0c:ae:
54:83:97:d6:e2:da:05:bc:2e:ea:82:6e:bb:69:33:
d8:24:e0:27:c2:ce:24:31:72:8f:9e:4f:49:7b:1e:
cd:31:7f:12:c5:95:06:61:70:8f:d0:e6:c1:3d:81:
b2:f2:2f:30:e4:6c:e1:96:9b:c5:0f:af:0a:bf:62:
79:a2:f5:97:2a:b4:96:63:47:af:51:74:c5:d6:27:
e0:8d:2e:2c:11:bf:4a:56:09:2a:e7:e7:02:d4:b8:
a4:c3:88:45:ba:58:e9:d0:57:8f:25:1c:23:9f:71:
fc:1c:bd:6e:7b:6e:8a:37:63:5b:26:32:92:ac:d0:
87:ec:4c:7f:55:19:2a:6d:83:e2:83:b3:5a:36:25:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:D2:A8:83:F0:17:60:F9:9C:61:D9:5F:D8:88:23:74:56:5D:77
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:3e:e8:a8:86:47:98:c0:d8:6f:64:2c:27:b9:68:b8:66:
b1:fc:69:49:b7:b2:b3:bd:cf:ca:43:88:d9:70:1a:06:d9:1b:
ce:34:3e:b2:dc:ad:fd:55:81:50:ca:de:c5:87:be:0e:10:43:
df:80:c7:e9:74:6d:78:e9:ba:16:32:36:e7:82:ee:84:8f:84:
84:ae:64:a9:a1:fa:73:6a:be:65:da:3c:8e:5d:74:01:30:16:
46:08:b0:1d:f6:82:14:6b:f6:22:e6:2e:0a:4e:81:c5:e8:b0:
9a:8d:44:8e:c5:b4:ad:a4:79:4d:4e:f1:8f:1a:88:63:82:27:
74:ea:3e:36:0e:6f:24:77:77:dc:ef:4d:7f:a4:82:9d:fe:65:
7c:68:ca:59:c8:4a:18:d8:7c:e5:e6:e3:c9:e3:af:83:18:4c:
02:a9:ec:2a:5b:f0:32:25:a4:d1:59:5b:23:3c:8f:4a:2e:53:
2c:f7:02:14:06:4e:f8:81:d6:71:56:40:93:83:ac:62:8f:72:
99:86:e8:9c:a6:7f:49:c1:a6:a3:b1:b7:40:4e:24:cb:e6:ba:
9e:ff:00:f4:8b:9d:a8:fb:16:a8:8c:b7:35:49:be:3c:b7:da:
14:b3:3e:18:b3:1a:cc:59:54:8f:63:24:43:cd:14:d4:a0:90:
0a:0a:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:59 2025 by rpki-client