Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: fcnADCO/J1qmlN5SFtbMnZ0+zgIzG4a0RaXgYwr+6Ng=
Subject key identifier: 4A:F5:4C:EA:59:16:0B:D7:62:74:43:51:CF:93:66:72:F9:19:4D:69
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019770AC2680D29E8B891CB7E20DFD6650B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0E58
Signing time: Sat 14 Jun 2025 23:00:19 +0000
Manifest this update: Sat 14 Jun 2025 23:00:19 +0000
Manifest next update: Sun 15 Jun 2025 23:00:19 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: WhS4sGz7kodGRy58Hlj8/6cnO7n/X0DZqKm0QWZ0cTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:26:80:d2:9e:8b:89:1c:b7:e2:0d:fd:66:50:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jun 14 23:00:19 2025 GMT
Not After : Jun 15 23:00:19 2025 GMT
Subject: CN=4af54cea59160bd762744351cf936672f9194d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:b0:8f:49:89:17:45:eb:40:dd:d4:b2:5f:
4e:d2:c3:2b:da:37:88:12:01:05:8b:ef:92:f3:2d:
de:a2:a9:f4:93:03:d2:64:87:31:ab:02:e2:dc:da:
50:cb:ef:98:b1:e9:5b:79:5e:b5:a1:b4:c8:c2:5b:
ce:01:c5:e3:d5:a4:0d:7b:44:14:4d:7d:e0:a8:26:
c3:e2:b4:d5:a3:e6:e8:3d:a4:00:23:0c:fb:61:2d:
cc:87:67:70:37:f5:a2:0e:cc:7a:6a:38:69:e4:26:
bd:a3:67:d4:fb:ab:be:1f:7b:87:73:2a:c7:4e:e4:
40:a2:51:07:b4:f4:28:77:4b:4b:d2:87:6f:9e:8d:
11:bb:eb:6d:f4:c2:cf:fa:24:b4:19:cc:30:ac:71:
1a:da:f6:6e:cf:1f:1d:af:66:19:6a:6b:38:30:51:
7a:13:fe:c2:ac:94:2f:b9:fa:6c:0a:d2:06:e4:2a:
24:a3:06:7b:83:f8:23:14:e5:e2:5b:ce:da:ec:23:
ae:0f:68:56:ef:db:e6:93:5e:eb:f7:d5:41:4a:3d:
39:e3:6d:c7:84:15:47:58:ea:0c:17:27:f2:64:d9:
23:80:f5:54:a1:2c:56:b3:de:66:c1:17:5b:3f:d4:
0c:8c:b1:85:af:a5:e6:c8:2e:43:7c:08:47:c6:ee:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:4C:EA:59:16:0B:D7:62:74:43:51:CF:93:66:72:F9:19:4D:69
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:2e:5c:55:74:05:36:f2:d6:3f:a9:87:0d:ca:b6:7c:64:
ac:63:d6:c3:a6:8f:c4:b3:56:e0:62:2b:13:17:71:2a:5f:4f:
88:16:60:32:0c:de:e1:4d:2e:56:34:17:dc:c8:6f:dd:12:f4:
f9:fb:1b:5c:ba:19:0d:03:7c:d1:a4:a1:01:3c:6e:97:39:51:
bf:26:f4:a9:ea:06:7c:2b:dd:37:63:b2:ec:55:6a:83:3b:32:
0e:1e:c8:43:27:52:c3:57:f3:e3:75:9c:38:e1:bf:94:5b:4a:
48:42:6b:e1:26:cf:f6:08:cf:30:b7:a8:16:f3:ef:4e:77:67:
fc:2e:cb:03:e8:09:8c:37:c3:b7:1f:d3:26:64:a1:86:8d:21:
20:5c:63:30:4f:ef:f9:57:e4:fe:fe:41:7c:ca:7c:2b:4f:61:
66:df:6b:3e:3a:73:9e:81:ce:7e:f2:23:7d:65:2d:8f:e0:ae:
83:de:2a:b5:9a:83:19:79:8d:af:75:46:d1:fc:10:10:3c:b4:
cd:a3:16:33:9b:21:17:9e:60:28:85:6b:dd:4a:78:22:a7:59:
dc:65:8d:5a:3f:20:0b:50:ac:9f:30:69:e1:9c:d6:36:2e:9e:
71:7a:4e:a9:f2:34:4d:fe:48:eb:b8:71:18:09:25:f5:f2:37:
2d:36:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:53:57 2025 by rpki-client