Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: J3na/x5UDBv77IpE9+sAthgbl2Lq59kweSBwWajfePc=
Subject key identifier: 7D:8A:9B:84:5B:55:C7:01:C3:2D:88:9F:70:47:2D:09:77:FF:DE:C5
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 01976C98A1E6ABDC699BC936DB8B59E0F978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 1385
Signing time: Sat 14 Jun 2025 04:00:31 +0000
Manifest this update: Sat 14 Jun 2025 04:00:31 +0000
Manifest next update: Sun 15 Jun 2025 04:00:31 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: K868+fboyxqzOtJLN+a/vqInqVyxV/lrMH2oFTPa/Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a1:e6:ab:dc:69:9b:c9:36:db:8b:59:e0:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Jun 14 04:00:31 2025 GMT
Not After : Jun 15 04:00:31 2025 GMT
Subject: CN=7d8a9b845b55c701c32d889f70472d0977ffdec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:1e:3c:66:00:97:1f:11:09:ca:65:c4:0e:
13:8f:d2:07:9a:3b:f2:3b:84:27:28:04:05:b0:75:
ee:d3:ac:2a:1a:b5:61:98:cf:2d:69:9b:64:2d:8f:
0e:79:60:d3:00:f8:ff:8c:0b:a1:d2:04:dd:cb:66:
bb:3e:45:7f:35:e5:8b:f1:b2:18:f0:c8:0a:c0:e7:
4e:96:45:1e:ce:48:d4:2b:ba:0b:78:3c:d2:87:f3:
af:64:c6:91:7c:59:6c:32:c0:06:a2:ab:2a:d8:21:
d6:dd:c0:04:be:87:e9:63:47:d4:dc:ce:74:7b:02:
c4:31:f6:4c:ef:cc:6a:9b:fc:ec:8e:f5:84:d1:06:
db:f7:cf:b4:20:da:54:db:b0:85:ec:b5:d9:ef:b4:
13:11:1a:5a:f1:23:20:a3:95:ab:86:3a:e2:9f:92:
b7:d6:d1:36:d4:d9:25:2b:93:5e:6d:1b:7e:3a:1f:
a4:ab:27:9c:87:b7:2e:01:49:b6:b6:9e:ed:d8:b3:
08:80:6d:46:26:11:cf:4f:cf:ed:0d:ab:c2:38:cc:
92:71:1b:5f:90:6c:0b:59:09:be:77:46:0f:43:c6:
3c:6e:65:31:e9:9d:47:5a:35:06:95:cb:7b:f5:f3:
2a:8f:06:19:39:c3:56:f8:50:78:46:cc:c2:b5:2e:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:9B:84:5B:55:C7:01:C3:2D:88:9F:70:47:2D:09:77:FF:DE:C5
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:15:62:33:cd:d3:ff:1d:3e:67:74:74:13:41:d2:47:af:
a6:00:ae:7a:7f:85:37:6f:9a:b1:9b:31:70:fa:5d:af:90:c8:
bc:44:63:26:c7:11:49:8e:a9:5e:8c:bf:c0:a1:37:e1:4d:d9:
80:79:35:a9:8d:f8:52:32:07:e0:17:cc:e1:bf:75:c0:c3:15:
03:09:ea:92:5b:28:2a:e3:4d:1e:30:c6:3f:ab:0b:df:67:dc:
65:e2:b4:59:62:01:75:01:d6:17:d3:ff:f2:0d:6c:bc:fe:27:
ad:b6:e0:b1:42:13:8e:d7:fe:1b:55:5c:0a:5f:86:16:f9:be:
19:4c:0d:0f:b8:15:46:b5:7e:ab:5e:bb:00:30:6f:d5:85:1e:
d7:99:f8:4c:66:cd:17:4b:6e:f7:40:0d:a0:6b:d4:3a:2c:4f:
43:95:c4:d7:d4:2a:32:e2:08:f2:c2:b2:96:73:7f:6e:4e:55:
80:48:ee:47:58:a1:4d:cc:ed:1f:38:91:cb:8f:86:5e:eb:3a:
da:82:34:5e:fc:7d:a4:f1:cb:ef:e8:92:57:82:04:06:ea:f3:
34:62:74:f2:71:95:33:3e:a0:1e:26:0d:58:b0:35:d9:1e:ab:
39:2b:33:76:a9:58:13:ed:ac:d3:cd:26:7b:b7:25:04:52:95:
12:06:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:12 2025 by rpki-client