Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: vYt5fWAhpyd2XLLiLjnjLc8jt0RAHl4z6RKI+njyAZM=
Subject key identifier: 23:8A:4D:C6:EF:BD:A8:ED:87:5D:1A:72:2C:AE:67:2E:F8:C6:E9:00
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019768BC60893D21B6D303E871172BF650C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0CDF
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: y5+aVT0j2e0VMmw7h/Qzp3h40o1jNl7vQ3RojxUHcGY=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:60:89:3d:21:b6:d3:03:e8:71:17:2b:f6:50:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=238a4dc6efbda8ed875d1a722cae672ef8c6e900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:7d:8d:09:c3:e6:a3:98:7a:0e:cb:a0:b6:
f3:06:56:c0:f4:8e:35:f0:cd:af:0b:49:0e:b0:15:
17:19:ff:a7:4a:42:a9:82:f8:5e:af:9a:83:9a:02:
af:da:e6:6f:69:c1:46:bf:f4:ef:75:35:f8:bf:9a:
55:84:56:33:9d:de:7e:34:db:3e:ba:1a:e8:4f:3a:
b6:34:34:d9:a6:f0:f5:0d:79:8a:30:f1:36:21:1b:
5a:82:81:76:ae:48:74:0e:e2:3f:f1:6d:4b:5c:c5:
7a:39:1f:06:0e:86:74:07:86:ea:03:4a:fd:b4:ec:
cb:46:c3:c8:cc:8e:b9:06:99:b4:d9:77:42:f3:af:
94:26:04:1c:8d:1e:81:46:cb:37:c8:27:2f:b4:46:
3e:25:db:13:00:1d:9f:9e:a8:6a:a9:33:84:af:ce:
d2:98:15:b0:3d:5f:ac:a0:7a:64:43:04:11:31:52:
fc:fa:0f:a2:dc:01:dc:cb:31:af:02:70:fd:a7:d0:
10:92:18:8d:0f:08:02:06:10:19:e7:c0:70:60:77:
94:6e:d8:d4:13:ee:f7:8f:b3:cd:37:4a:65:ef:43:
98:d2:b0:a1:e9:7a:a2:61:00:25:c6:9e:91:29:a9:
5a:27:46:0b:8e:99:db:bf:b9:b0:d3:fd:c0:2d:a5:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:4D:C6:EF:BD:A8:ED:87:5D:1A:72:2C:AE:67:2E:F8:C6:E9:00
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:76:41:26:09:dd:1b:86:73:aa:2a:bb:02:94:9a:35:9b:2d:
d6:17:08:e5:5c:ff:40:df:e0:de:4b:e8:0a:52:46:40:0d:eb:
15:e8:aa:3c:38:3d:50:bb:c5:a9:ad:07:72:73:8e:be:59:23:
76:e1:4f:6f:dc:c8:85:27:da:51:ad:ea:b3:0d:77:28:a6:36:
85:eb:e2:77:e0:27:82:9f:53:5b:be:c3:c6:ac:0a:e0:5b:bd:
57:6d:8b:b9:ec:90:4d:2d:f9:b4:89:77:b9:7e:77:d9:63:86:
a6:46:32:11:e5:e1:1c:1e:9d:e3:45:4c:a5:02:f6:72:25:c9:
94:36:3f:59:5e:f0:14:9f:b2:82:f1:3e:f0:13:49:95:23:9f:
33:4b:61:d5:7d:40:15:38:02:e8:cf:7f:5d:77:93:6f:80:27:
3f:fa:ea:a0:f7:a6:60:4e:30:89:42:85:cc:d1:14:46:be:09:
8d:25:a2:96:85:4d:1b:4c:7e:0b:4d:3e:65:57:5a:0b:99:a1:
0f:82:ef:48:bf:03:6b:6d:c5:ee:fe:ff:96:4b:18:5c:76:4c:
99:e6:b7:3a:7d:6f:0b:b1:fa:c4:cc:ae:5b:40:1d:9c:b8:84:
03:64:14:e0:e6:72:93:07:27:3a:f4:bc:c5:31:01:9a:30:c0:
12:d5:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:21 2025 by rpki-client