Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: Wg/KczCuy8T6iYO6MEL5DkRxb9dJCDRIMckFmbpwJbY=
Subject key identifier: 8C:D7:C9:FB:FE:E1:9B:CD:1B:51:38:BD:CE:70:23:FC:40:4B:34:AB
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 01976BBD24B30F628DB358620C450DCBDA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 055C
Signing time: Sat 14 Jun 2025 00:00:46 +0000
Manifest this update: Sat 14 Jun 2025 00:00:46 +0000
Manifest next update: Sun 15 Jun 2025 00:00:46 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: cpsYFXujsEXiFtTnysrPAAmQivGtnzKV4t5VNc79C6U=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:24:b3:0f:62:8d:b3:58:62:0c:45:0d:cb:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Jun 14 00:00:46 2025 GMT
Not After : Jun 15 00:00:46 2025 GMT
Subject: CN=8cd7c9fbfee19bcd1b5138bdce7023fc404b34ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:da:dc:07:c6:e6:34:af:d7:71:e8:d3:6d:
21:26:a9:a5:89:ec:41:6a:fc:30:d3:60:76:75:b2:
a3:89:b5:71:d8:13:61:66:30:77:1e:55:87:9c:8e:
f4:d9:7b:9f:32:c0:60:2b:89:ea:79:46:aa:2b:17:
fb:e2:5e:e4:d4:75:e8:99:df:19:37:06:eb:b9:5f:
04:66:c3:59:01:2c:dd:c7:ad:c3:b1:6e:19:7d:a2:
13:6b:62:a8:aa:e8:04:14:b6:44:e4:a6:51:35:86:
17:a8:27:a4:69:62:fe:ac:8d:f8:36:fc:e5:78:35:
47:f4:4f:6d:2d:1c:f2:ff:d6:c5:84:11:44:42:23:
71:ee:df:62:ee:7d:32:21:30:8f:8c:76:1e:2a:70:
ec:1e:8b:20:bc:ac:cd:05:a8:ec:f9:79:39:93:1f:
a3:47:fc:1d:75:cb:b7:c3:66:0f:1b:66:d5:f9:e9:
de:c8:c8:b7:ab:e9:12:ae:bd:c9:bb:e1:f1:ee:a8:
0b:47:4f:63:21:31:09:97:4f:96:20:3f:58:4f:3b:
07:11:dc:36:09:ce:fa:c4:b6:7c:42:af:d2:a2:16:
86:8b:94:54:24:50:ef:0d:8f:ef:d9:57:cd:01:49:
d9:91:c7:de:8f:f1:19:d6:cc:c2:07:69:4a:d8:73:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:C9:FB:FE:E1:9B:CD:1B:51:38:BD:CE:70:23:FC:40:4B:34:AB
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f2:9c:42:e8:c0:3d:41:00:0c:90:06:07:69:e7:c3:ed:47:
ce:0f:b4:cf:06:42:da:2d:4f:cf:2a:1c:e6:7a:1f:ef:82:df:
43:64:0e:2a:ed:04:2d:fd:ce:f4:ea:46:0f:95:62:60:1b:d7:
4d:ca:bd:63:09:3b:78:08:be:8b:a9:f4:8d:b8:fa:01:62:db:
b9:7e:0c:0f:f8:e6:62:30:6c:e8:be:47:52:b7:ad:76:e2:41:
6d:c5:80:65:63:ff:87:5c:db:3c:27:9b:2d:65:e1:aa:99:44:
84:e6:a2:97:4a:b8:e4:f2:dd:29:c3:62:b3:5c:29:1a:4e:34:
11:d4:cf:c8:40:b5:88:1c:6d:f6:b5:25:1b:61:02:05:95:b5:
61:8d:71:ab:86:0c:31:c2:e7:14:70:85:27:46:23:be:ab:b7:
d2:f8:ce:f8:58:79:5e:c1:53:61:b4:1f:ca:a6:62:3c:70:bd:
cf:1d:66:67:c5:3d:1c:71:6b:55:0d:54:2d:a7:bc:47:e1:c0:
9e:04:81:e3:31:12:e7:c9:52:89:a8:95:39:a5:0f:5e:ed:79:
fa:d0:37:36:bf:76:f2:65:83:f8:0b:15:74:b5:8c:c9:4b:9c:
f3:94:42:2d:b0:3f:bf:80:8d:6e:1f:cd:03:5c:8f:16:be:be:
f8:4f:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:00 2025 by rpki-client