Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: RbjdbpP+yp2lV7hVkdj/grf3rDeqe3V/8kZp4H5i45w=
Subject key identifier: 1B:70:1C:D0:0E:65:24:04:77:2F:E7:34:0A:46:F6:4A:BE:97:CE:D1
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 01977309B996FC8FBFF8912B4DA2EE290840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 10:01:46 +0000
Manifest this update: Sun 15 Jun 2025 10:01:46 +0000
Manifest next update: Mon 16 Jun 2025 10:01:46 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: 6G9s1mpvJebv23d93FdGWYMs0Wo+j2pruQk4LyP2QA8=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:b9:96:fc:8f:bf:f8:91:2b:4d:a2:ee:29:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Jun 15 10:01:46 2025 GMT
Not After : Jun 16 10:01:46 2025 GMT
Subject: CN=1b701cd00e652404772fe7340a46f64abe97ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:b1:16:44:f1:90:ab:d8:f9:f1:36:0f:cd:
7d:60:50:dd:c1:32:80:77:da:59:51:77:4f:c3:fa:
27:8d:2f:c3:66:90:bd:2f:38:d5:30:44:f3:7c:7c:
66:b7:85:a2:d1:a5:7f:9f:cf:3e:e2:da:2c:8d:7a:
bd:77:b6:61:c1:98:2c:5e:11:4b:a9:7c:52:1f:05:
5f:a1:8e:8b:f7:d6:71:c2:98:21:48:96:01:fd:53:
ce:6f:9c:9c:6d:b9:63:b5:ef:da:52:44:c4:79:7a:
3f:8b:fb:11:67:74:d9:91:a9:f8:ca:3b:b2:15:28:
44:67:93:85:47:23:6c:a0:f5:ad:bf:4a:c5:87:22:
23:79:71:7d:e3:f1:e6:bc:dc:b5:91:3a:b2:92:1a:
26:0f:20:f2:b8:69:28:46:16:a3:74:8b:ed:6d:d7:
d1:0e:8a:5c:e8:a9:27:62:a1:da:16:68:6c:b3:a1:
da:4a:cf:44:c6:23:9d:df:5c:d9:fb:1b:3a:30:d8:
57:31:3e:5a:01:9e:8f:6e:6f:d1:b8:92:84:a0:ed:
7c:fb:cc:5c:ce:8f:3e:e5:4e:59:ae:70:66:6e:6b:
15:99:cb:c2:bf:d9:b8:e2:88:cb:ec:3f:aa:6b:df:
cc:da:85:00:d4:76:20:de:02:ef:18:ca:ce:31:cd:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:1C:D0:0E:65:24:04:77:2F:E7:34:0A:46:F6:4A:BE:97:CE:D1
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:68:73:f3:3c:57:c1:34:f3:ed:a9:d4:0c:bd:8f:38:43:
8e:33:30:75:9e:eb:7f:59:94:36:a9:7a:2c:51:2f:7c:6a:08:
f0:37:18:5a:25:6c:9e:83:be:ea:db:6c:5f:d8:5a:ff:a7:d1:
02:46:74:63:48:7a:00:49:27:ee:b5:7a:90:bb:b1:39:a6:08:
30:18:98:cf:c6:d7:74:69:84:b1:92:f8:c8:e8:72:aa:70:18:
16:13:85:c8:c8:db:cc:4e:29:b4:92:28:66:3f:08:43:56:73:
92:76:ea:bb:97:d6:54:67:7f:d3:4f:a2:93:0d:70:1f:f6:64:
6e:d5:10:74:2a:ba:db:87:8f:1c:10:15:31:05:bb:cf:d1:a2:
92:0e:cc:46:cf:55:1e:08:fe:2d:77:42:d5:6f:c0:83:73:f9:
09:06:bf:5d:e4:7d:c9:ea:f4:83:63:12:ce:b0:b6:f5:2f:fa:
fa:e4:06:c0:98:27:a4:b9:05:ec:71:c0:4c:59:80:cc:3c:54:
77:00:b4:54:6c:8d:66:60:fe:ba:94:fe:da:90:e9:1e:78:1f:
ed:8a:13:c5:a1:6f:df:8f:43:98:fa:0f:3f:ea:25:9f:4f:c1:
89:6f:f1:4f:1e:53:1c:24:4d:c3:d5:52:6c:3a:bd:ee:d0:ba:
70:ba:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:09 2025 by rpki-client