Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: vgixH/rs/j4V0Su/+oO4y1z/K4V0omNGJdkTEJ4gefI=
Subject key identifier: D8:5A:80:15:FE:AC:9F:C5:5C:E2:DD:E7:98:92:DB:FE:91:63:A3:51
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019773AE082B67E5FC96F3B9AD7F8C8FE34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 1347
Signing time: Sun 15 Jun 2025 13:01:14 +0000
Manifest this update: Sun 15 Jun 2025 13:01:14 +0000
Manifest next update: Mon 16 Jun 2025 13:01:14 +0000
Files and hashes: 1: 8VWdbwuahqcw7zclxs3ZXPAVWno.roa (hash: ZO8J4VlFR2M5Qop1zlocM8dgwe5Uq6otS6RyEiq+ukI=)
2: GAmyQv8-gT8CZ7d-txbZl5EhOio.roa (hash: iUcK9uyMQ6focHOP9BZWCHQasgvLPeszd6U4NOgrxL8=)
3: ZfBa2kOopYZN1zSmKbC-lmjGWMU.roa (hash: XOVEAESgfg7MRdYVfSlFUrFkfMe08NvtY8t3C+PTjsk=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: dEcn7HuRJ+zmzktmxyVcYqfA8bw1l90+Ia01K7cfSKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ae:08:2b:67:e5:fc:96:f3:b9:ad:7f:8c:8f:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jun 15 13:01:14 2025 GMT
Not After : Jun 16 13:01:14 2025 GMT
Subject: CN=d85a8015feac9fc55ce2dde79892dbfe9163a351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:ac:0a:b0:c3:ec:c3:12:fd:74:62:2b:c1:
a8:ae:d6:b9:9d:de:f4:5b:de:81:cd:85:e5:1d:4a:
f6:72:56:49:0b:e0:92:ed:4c:94:40:17:b0:94:e9:
a5:9c:ca:84:3c:40:09:ed:d0:15:0f:23:95:de:f8:
94:eb:a6:61:12:36:0d:d6:22:24:4f:27:ba:33:12:
74:ec:6b:e8:9e:04:b9:17:a6:18:88:e4:4f:cf:7f:
dc:d0:b9:2c:50:e3:34:92:d8:df:70:2c:02:0a:04:
39:be:5f:e3:06:dc:99:8d:3c:52:3c:f9:af:e4:87:
7a:7a:6c:15:22:e5:86:60:86:c9:6c:af:3f:02:26:
df:a6:07:d8:70:8f:4a:e0:02:48:cd:39:5a:b5:39:
82:3f:38:22:f5:e0:04:0d:54:80:5a:4a:a5:db:aa:
65:d4:99:71:82:54:48:5e:15:e3:74:00:91:a7:74:
86:7b:0a:a2:7d:d7:a5:ef:75:ae:13:de:0b:c7:02:
12:a7:b9:b0:49:e4:9b:5e:f6:18:4d:28:80:a1:ac:
fa:4b:ba:49:90:40:58:eb:27:85:76:4c:71:61:ce:
4c:74:f0:e2:82:cf:c8:bd:de:d2:ec:1a:93:07:83:
40:19:a6:76:58:b2:f6:aa:c7:ce:c2:ad:c7:82:9f:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5A:80:15:FE:AC:9F:C5:5C:E2:DD:E7:98:92:DB:FE:91:63:A3:51
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5c:83:28:c1:db:3d:1a:78:4f:dc:f7:61:f1:22:69:32:82:
68:62:67:c1:7a:4c:90:3a:aa:40:dd:09:e7:97:d2:81:02:2d:
1b:ad:cd:ba:5c:87:60:33:01:87:35:00:9f:d4:6b:23:3c:72:
8e:b4:b6:e7:e3:cc:60:a6:36:50:bb:12:41:79:8b:3f:d1:a1:
2d:43:e1:c1:72:05:60:2e:ea:ef:82:bc:06:e5:48:ab:39:07:
7a:54:3e:2b:1e:f5:d4:77:0a:89:a0:5d:5c:c8:7f:58:e4:01:
9d:0e:8d:13:f1:d3:f1:48:4c:05:51:de:b8:10:f3:0f:b3:4a:
bf:e6:43:12:a3:f2:bc:d5:8b:5e:12:67:3e:0a:63:12:ba:91:
77:7b:df:5c:6d:b4:8c:80:13:f5:b8:9c:83:ae:65:06:80:b9:
50:e0:eb:71:d1:b7:e8:47:0b:4b:d3:99:95:57:4e:1a:04:cd:
5c:31:5b:06:ca:99:72:44:23:05:a4:ca:ca:68:1a:93:39:c2:
cc:26:08:70:fa:70:d0:d0:c9:2d:5d:42:ad:ef:6a:80:cc:27:
61:e2:d9:96:82:e9:21:24:53:cb:70:b8:83:18:dd:54:3f:d2:
e2:38:f2:ed:0d:ba:0c:ac:49:05:b2:ab:4d:be:c1:2a:67:be:
71:a7:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:35 2025 by rpki-client