Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: aTlM+7HqPTu9dbyr1w3nKUiswMh1hISh1tFCUXLcecA=
Subject key identifier: 38:DE:00:4C:76:17:A0:3C:1C:C1:85:4F:4B:7A:54:31:76:93:6F:36
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 01984BC1699A89894B1D46E16420B98DCE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 120D
Signing time: Sun 27 Jul 2025 12:00:23 +0000
Manifest this update: Sun 27 Jul 2025 12:00:23 +0000
Manifest next update: Mon 28 Jul 2025 12:00:23 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: MVGv9hjOpp3D4lG0D0+G21L5xiTJAW74Pme2CEiEn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:69:9a:89:89:4b:1d:46:e1:64:20:b9:8d:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Jul 27 12:00:23 2025 GMT
Not After : Jul 28 12:00:23 2025 GMT
Subject: CN=38de004c7617a03c1cc1854f4b7a543176936f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:5f:c0:3b:48:48:7e:0f:71:fb:96:f5:55:
83:94:44:a4:fd:3d:3d:64:25:a6:4e:c1:bb:83:bd:
0a:c2:3f:72:17:63:07:d7:9e:8a:af:b6:80:fa:ec:
ac:49:78:7d:fe:aa:4e:00:8d:da:0f:df:30:a5:64:
00:9f:91:cd:91:16:43:0e:65:85:da:d5:97:1d:3d:
0d:a8:d1:55:65:bd:50:ba:0d:57:ec:81:24:0c:39:
fe:be:28:e4:3f:d5:e1:9b:7d:74:0a:07:99:2d:ca:
15:b9:a1:68:dc:90:46:38:a4:21:c2:20:e9:5a:9f:
52:1e:a8:01:34:25:5f:b3:af:97:fd:da:b1:97:67:
5e:6b:a1:5a:95:70:fa:05:30:00:53:8d:b9:3f:b3:
69:8c:7b:f7:3a:c1:54:b1:7b:e9:4d:4f:22:b2:44:
bb:f7:43:df:1b:54:ef:bb:81:9c:c7:48:74:5f:bc:
c7:9d:34:c6:4b:08:84:fc:c4:e9:18:0f:f0:20:9d:
f9:f1:77:c5:83:c9:1a:6a:79:b4:5c:72:f0:f9:2b:
d9:b0:db:bd:3b:6b:9a:96:24:50:e6:0a:ae:0c:75:
17:ec:26:55:28:02:bc:23:2b:04:5b:d7:97:97:8b:
1e:6e:7d:09:da:73:e6:ac:d3:00:c2:6f:e2:d6:fe:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:00:4C:76:17:A0:3C:1C:C1:85:4F:4B:7A:54:31:76:93:6F:36
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ee:cf:f4:1f:f0:cb:96:a4:58:83:03:9e:80:c9:df:f0:c6:
45:c3:92:91:a8:89:bd:58:24:ff:6a:cd:af:a8:a0:53:24:b4:
25:cd:94:36:4e:18:3f:0a:e2:1f:00:5e:d0:63:3b:d3:19:71:
9f:28:a7:75:96:3a:c8:56:c3:54:fe:a4:88:6b:86:77:60:ee:
89:8f:2a:b4:0c:58:7e:f3:14:b6:51:46:23:c9:de:cf:70:22:
fd:7f:fa:7f:07:a9:2c:3a:8c:ad:e0:04:f4:f5:65:17:e9:cf:
a8:62:98:29:7d:1c:f4:92:95:42:47:60:4f:cd:19:45:42:80:
4f:c1:18:c7:a7:58:a0:7c:d0:db:78:21:e3:b5:c4:4d:5b:9c:
25:a5:92:48:f9:0e:a6:17:94:92:05:67:ad:57:dc:0d:b3:c9:
0a:5c:b4:3a:8a:07:02:b7:2b:f4:2e:6f:7b:fe:d4:5a:76:82:
1c:8c:55:6b:7a:1b:d3:2d:5e:d7:44:79:55:5d:52:19:8b:b8:
d7:03:3f:83:50:b7:5f:69:20:6f:2f:03:11:d5:d6:b2:ef:21:
77:45:d8:bf:6b:ad:04:68:58:e5:97:83:3b:7d:59:8f:cc:1e:
7a:17:ff:77:c7:11:1d:b7:e7:27:67:c6:9c:de:d2:bc:ca:21:
79:a1:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:02:00 2025 by rpki-client