Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: i2x2Vw0ivO25La/Uf2GJ5/2G0XaLEdKWm5YgvnLJKn8=
Subject key identifier: 4E:7B:B2:38:83:22:62:B0:52:DE:B1:56:CD:B1:35:58:69:F0:22:E6
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 01976997683A0340126C5CDC71D11C893930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0C6E
Signing time: Fri 13 Jun 2025 14:00:19 +0000
Manifest this update: Fri 13 Jun 2025 14:00:19 +0000
Manifest next update: Sat 14 Jun 2025 14:00:19 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: PvF66Xz0N2n9XRNmFUo9Ck/0il+1oqqbDJSlgv6VzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:68:3a:03:40:12:6c:5c:dc:71:d1:1c:89:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Jun 13 14:00:19 2025 GMT
Not After : Jun 14 14:00:19 2025 GMT
Subject: CN=4e7bb238832262b052deb156cdb1355869f022e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:9e:09:13:89:e2:03:82:bd:21:ed:25:2c:
e8:da:ec:3f:18:88:72:f6:94:da:d8:d9:8f:b6:69:
c2:5d:c1:58:ae:bd:d1:5f:89:2e:3f:41:dc:bf:06:
27:1a:a7:f9:dc:7a:99:5a:02:40:e9:5b:d8:99:65:
df:a8:a3:64:b6:7d:36:ad:f3:e4:2d:89:0c:6f:72:
bf:c2:5d:2e:08:a7:df:c0:7e:7e:5e:0e:aa:97:ec:
75:66:af:13:33:46:d8:08:c4:5f:b5:2e:77:c8:28:
da:32:fd:82:f6:e8:e1:78:c4:74:14:46:56:02:fe:
9c:99:df:c0:8f:ce:89:b7:78:99:8c:fd:f0:b5:ac:
35:cf:dc:45:ad:61:05:e5:99:64:a0:b6:d7:aa:ca:
4a:d1:17:f7:f4:4e:10:ce:6a:31:b9:72:7a:5c:04:
e1:ed:e1:94:ad:38:93:da:df:fb:60:d3:60:2b:6a:
18:2f:65:a3:77:d7:8f:f9:21:05:55:bc:94:87:c8:
7d:20:5f:30:67:72:4f:4b:f7:00:ca:57:3a:ca:49:
7d:8d:d0:b7:95:7b:4f:9d:8b:00:90:f2:28:4c:bb:
37:c0:59:85:f6:67:7e:09:3b:21:45:42:e7:de:9f:
42:8c:4d:bf:1f:09:4d:34:c9:1a:3b:28:11:55:8f:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:B2:38:83:22:62:B0:52:DE:B1:56:CD:B1:35:58:69:F0:22:E6
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:6c:3b:61:59:ec:15:23:1c:87:d0:a5:81:75:b9:ab:86:
95:ef:43:6c:41:bd:56:4c:cf:09:55:53:5e:81:0a:bb:cb:47:
2f:cd:16:bd:2e:cc:61:38:1e:f6:47:75:d0:39:c2:79:3f:23:
8a:bd:cf:8b:c8:03:b4:5a:08:c4:6c:c7:10:64:4b:75:8e:02:
b0:7a:dc:9b:03:8b:6c:2b:a9:7e:e1:90:ae:39:e8:fb:c2:49:
48:d2:f7:c0:95:d3:18:0f:93:8b:8c:cb:d8:b6:19:d8:af:86:
2d:1e:d6:76:92:53:43:82:45:e9:e2:73:f6:3c:4a:55:5f:f0:
bf:9f:5c:81:44:eb:ea:d3:73:a6:40:f4:93:dd:02:47:2d:d4:
b4:cd:87:ee:f6:73:a9:cf:62:90:c0:69:e8:45:0b:6d:fd:6e:
c2:ae:48:aa:18:39:a5:a1:5a:41:75:dd:f6:c3:ce:12:6d:d6:
28:a0:96:6a:2d:aa:5f:96:c6:02:2a:da:5a:59:aa:c8:39:02:
e2:37:f4:c5:c8:9c:19:32:65:65:cd:ad:f0:71:07:d7:eb:e4:
98:30:42:23:69:83:63:3f:0e:00:b2:aa:ba:b9:97:81:01:aa:
93:48:c3:a0:ad:23:65:9a:db:15:fc:7f:4e:65:80:36:4e:b1:
22:40:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:51 2025 by rpki-client