Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
File: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft (raw, json)
Hash identifier: etaRXjLomobAeQMfulJ+Cy4bE7kgbVOh4wQG53r8D5c=
Subject key identifier: 99:CB:C0:3B:F7:3B:1D:1D:53:4A:97:05:6F:1A:0B:1A:8F:4B:5E:07
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial: 01976884D7AB1EDD4B01E85C625FE7A5FE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
Manifest number: 0F87
Signing time: Fri 13 Jun 2025 09:00:25 +0000
Manifest this update: Fri 13 Jun 2025 09:00:25 +0000
Manifest next update: Sat 14 Jun 2025 09:00:25 +0000
Files and hashes: 1: 8lcVMAvDHKFVWpkIvW003vZxmno.roa (hash: b9AoL9a4Iwp34m1O6gUmOqwjFvFHDHYDPCqNWBeuTCY=)
2: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl (hash: 2KMEcrl76/y8TnxRsMRKWJOLyt2ewFHK1Qq9c7h+ua4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d7:ab:1e:dd:4b:01:e8:5c:62:5f:e7:a5:fe:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Validity
Not Before: Jun 13 09:00:25 2025 GMT
Not After : Jun 14 09:00:25 2025 GMT
Subject: CN=99cbc03bf73b1d1d534a97056f1a0b1a8f4b5e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:17:e0:03:0d:2e:ba:bf:48:ce:13:42:35:
c6:f6:86:bb:22:1d:91:12:f4:6f:87:46:a1:ca:8a:
4e:d3:0b:01:9b:a4:43:08:31:ac:67:18:0a:40:1d:
00:7d:67:28:4e:93:31:d3:43:21:54:69:ce:6b:8e:
43:17:2d:a2:d7:93:bc:70:83:78:7a:85:83:31:2b:
d0:61:4b:cc:eb:55:8e:73:15:31:8b:89:a4:73:5b:
c6:79:6d:2c:13:36:ba:3b:83:86:45:47:05:d1:f3:
52:b5:d6:65:55:f5:83:6a:9c:bc:2e:8a:11:0e:8c:
7b:75:70:45:21:83:7c:1e:67:3b:f2:87:a2:af:ed:
96:ce:db:1b:54:b8:2f:af:3e:ee:cf:46:79:1c:78:
1d:d0:cd:01:9e:65:94:54:b8:34:38:9e:92:3f:fe:
d9:c2:a5:16:a7:4e:b8:1c:bd:9b:33:60:ad:04:70:
3b:77:e6:50:8e:ba:82:94:85:cf:f6:7c:3f:d6:b3:
56:fe:8a:e2:52:73:41:c5:1e:fd:70:2a:d3:fe:1d:
52:43:a1:06:b2:b0:aa:73:3d:ee:ac:7f:0f:93:e9:
0b:15:ee:fb:5f:1c:82:79:62:e1:60:b8:f6:0b:cc:
a9:70:1c:e2:a9:97:18:76:df:87:91:c8:37:15:66:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:C0:3B:F7:3B:1D:1D:53:4A:97:05:6F:1A:0B:1A:8F:4B:5E:07
X509v3 Authority Key Identifier:
keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:89:81:06:68:43:2a:65:0d:10:a9:c0:7f:94:81:30:dd:25:
dc:36:7d:83:b1:77:01:57:64:a3:b1:3d:0d:fe:10:2c:04:3b:
15:6a:87:52:c9:97:39:c3:e0:9d:8e:bf:33:09:d4:03:86:e8:
3e:bf:97:d0:41:4f:04:d7:97:09:1b:a6:3f:f0:cd:83:7c:f8:
09:8f:b9:a3:0a:ef:49:44:f9:c8:be:02:c0:7e:d3:b4:b2:8a:
df:5c:33:7c:4f:22:1c:68:af:d1:f1:e2:2f:49:b5:27:70:37:
23:07:8f:94:26:1e:2d:e7:b6:95:06:11:44:e2:cc:5d:c7:fc:
ea:5d:74:ba:ab:33:c7:bd:e7:02:4d:d8:9c:3b:ae:d4:17:b3:
fe:ec:38:16:18:89:4f:21:60:a3:9b:f0:85:65:be:22:9a:b9:
be:0e:f6:e5:8d:d5:5f:42:4c:01:d7:75:eb:37:4c:e4:cd:d8:
c2:c1:e1:12:10:f4:a6:53:1c:da:41:bb:ea:b5:c7:39:75:fe:
bc:9b:f7:08:05:97:80:db:60:32:7d:2e:9b:f0:6b:19:65:c0:
c7:f2:73:ed:12:4f:b0:66:bb:39:e0:d5:4f:ad:64:87:ef:38:
e2:02:43:f3:93:65:31:9a:c6:05:49:49:4a:b7:8b:24:42:4d:
1f:c6:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:38 2025 by rpki-client