Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: agZ1Gr8lePkMJOwiC7c1bzwab5ahFKARnwWbjB9dp/s=
Subject key identifier: 76:A4:69:98:09:F0:78:C9:5A:9D:6E:69:2F:7D:44:DE:38:60:57:14
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 019770AC6F9C385E90DBC81808DFA54BECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 121F
Signing time: Sat 14 Jun 2025 23:00:38 +0000
Manifest this update: Sat 14 Jun 2025 23:00:38 +0000
Manifest next update: Sun 15 Jun 2025 23:00:38 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: nIARw8wQ78M26m9V0D7XKo1C/N2eGkIPF4lFm3NzpXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:6f:9c:38:5e:90:db:c8:18:08:df:a5:4b:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Jun 14 23:00:38 2025 GMT
Not After : Jun 15 23:00:38 2025 GMT
Subject: CN=76a4699809f078c95a9d6e692f7d44de38605714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:73:c2:50:72:95:57:9f:1d:78:aa:9d:7a:
bc:ab:ef:d7:18:c0:2c:1b:64:89:c6:2a:59:c8:97:
a1:f5:01:7f:ad:99:ed:6f:9c:01:94:d6:b8:94:2a:
4f:3b:f5:5d:2e:37:f1:5b:1b:07:78:41:50:e6:29:
dd:22:20:a1:d6:65:22:51:10:49:f3:b3:cc:ca:f4:
cf:13:56:5f:e9:d0:66:ff:2c:06:4b:d0:21:51:54:
03:a0:2e:e6:9d:e0:43:7c:86:b7:d8:ba:1b:72:a7:
77:19:e0:b8:e0:71:87:20:23:d4:d6:ad:a2:39:2a:
06:17:17:f5:e3:88:c8:0b:e5:c0:7b:24:c6:07:cf:
7a:94:7e:15:0a:26:d7:71:ea:75:98:d3:ac:ad:6a:
4b:e4:85:94:b7:3a:94:6a:31:49:b9:6f:55:df:ba:
64:e9:ff:af:78:33:86:80:b6:75:49:01:b9:da:80:
be:1b:ab:b5:92:02:d7:bc:6d:d4:58:78:d5:cf:4d:
25:b2:f1:58:98:93:26:d8:7f:6e:2e:44:bc:d4:ea:
d4:e7:4d:95:ed:d8:45:89:79:a4:2d:d2:15:da:c6:
bb:b8:4e:63:83:82:e1:e7:1e:a1:a1:78:a0:86:d0:
eb:ec:10:eb:f3:54:dc:6a:73:31:26:8c:22:c2:c9:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:69:98:09:F0:78:C9:5A:9D:6E:69:2F:7D:44:DE:38:60:57:14
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:58:5a:68:33:cc:0e:cd:ae:a0:33:37:43:cb:e4:b1:03:db:
ac:ce:4e:0d:37:3e:4e:78:48:9d:cb:f0:27:93:66:7d:36:ba:
5b:68:7d:17:c4:b4:cf:4f:6a:53:4f:fa:ca:20:04:ba:d4:ca:
8f:ba:c4:e2:e7:90:1a:1d:f3:e6:3b:d5:29:c7:30:bd:c0:b1:
e2:b5:74:2e:b0:07:74:50:f2:ab:e1:63:19:b3:ab:01:94:dd:
17:08:00:12:9f:13:08:65:d8:22:49:ac:f6:63:f7:c2:23:7d:
99:57:31:66:b9:28:7b:cb:de:93:29:a1:39:5e:51:3f:79:da:
c9:3c:a2:03:f2:67:e8:5f:e5:4c:4d:75:ee:74:e1:cc:3d:2b:
d5:a9:80:49:88:b3:5c:cb:d0:45:af:54:3b:b4:7f:78:37:12:
f8:d6:85:61:3b:50:03:f7:d8:38:28:ef:a2:f1:9e:ae:93:12:
f0:0f:51:9c:17:c6:25:73:f9:db:44:5b:4e:55:dd:5f:60:2f:
29:42:9c:29:75:00:40:3d:9e:e0:ee:15:eb:61:f5:68:74:e0:
ea:0d:4a:dd:b7:80:1b:52:40:d2:79:03:80:6d:16:fe:20:19:
da:26:59:dd:7f:f8:4a:1b:ae:3a:c0:08:73:b4:12:09:91:58:
ef:81:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:43:06 2025 by rpki-client