Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: XspZwGDbK3ZMlEAO65gR8I4lKLcI7uhE2sZ6UVznt7w=
Subject key identifier: 58:50:0D:86:2B:F0:78:82:7B:41:7A:1A:84:F9:17:3A:0F:B9:A1:EB
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 01984BF86DFCA3466509FBF98EC5629A4E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0575
Signing time: Sun 27 Jul 2025 13:00:28 +0000
Manifest this update: Sun 27 Jul 2025 13:00:28 +0000
Manifest next update: Mon 28 Jul 2025 13:00:28 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: ve/sntrkJ/01XgG9z3N6ZViNYZ62Ba7sn6XZ7Ra1dA4=)
4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:6d:fc:a3:46:65:09:fb:f9:8e:c5:62:9a:4e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Jul 27 13:00:28 2025 GMT
Not After : Jul 28 13:00:28 2025 GMT
Subject: CN=58500d862bf078827b417a1a84f9173a0fb9a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:e3:19:0c:49:8c:83:d3:43:e9:c6:2e:58:
2c:f2:2e:31:40:92:61:cd:4d:f3:78:48:d9:a9:db:
10:a9:e5:14:df:89:d6:48:ec:78:50:92:9f:7b:63:
f8:ae:2b:7d:80:90:87:29:ee:01:e1:db:a0:a5:b2:
f0:02:28:f0:ab:4e:ab:15:0b:fe:5e:b8:98:43:7b:
f5:36:b5:b8:98:0f:62:6e:b2:5e:03:cb:f2:a9:16:
df:e1:be:5f:58:44:90:9e:62:2e:9a:13:45:8d:a8:
63:3f:3c:23:3e:6e:0a:f1:57:a1:66:60:b8:b1:80:
c3:65:bb:18:db:06:b7:b1:4a:b7:94:20:c9:af:d4:
a2:37:51:4d:10:14:d4:52:66:99:eb:27:50:56:7c:
d2:61:9c:d1:5b:d4:9d:1e:d6:b7:f2:d0:ef:c6:15:
8d:2f:8a:c2:7b:fd:34:62:9b:2b:83:8c:f4:74:b2:
af:c6:1f:21:c2:f0:fd:78:35:2f:ab:12:d7:8b:a4:
d8:9f:3b:be:dc:5c:df:be:d9:37:9c:3f:31:d6:2c:
23:eb:4b:1c:7f:7f:d3:cc:c7:b0:37:a8:cb:f2:ee:
f8:02:93:82:66:2b:66:a6:b8:53:0d:d2:53:4a:37:
44:5e:9a:5e:50:0b:a0:f6:d7:f7:a3:57:50:e2:94:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:0D:86:2B:F0:78:82:7B:41:7A:1A:84:F9:17:3A:0F:B9:A1:EB
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:7a:aa:1c:3c:75:a6:45:5a:46:74:5f:0d:0e:de:b4:b3:34:
5e:e0:67:5e:77:9d:88:dd:e6:34:b1:29:02:23:d2:06:f2:5c:
b4:2b:a6:ab:d2:e9:96:e3:ff:2d:34:29:cf:72:19:3e:12:7e:
b0:18:51:e0:27:a0:2f:41:2d:69:ea:2f:85:4a:aa:8d:41:c6:
74:e6:75:5f:47:58:72:d7:04:50:fe:0c:9b:e9:37:74:bd:07:
ec:a8:4b:a6:6d:41:b5:8b:18:08:f0:d4:c4:51:27:9f:86:af:
61:f9:98:c2:35:00:b5:ca:30:6f:e9:0c:b3:23:6e:61:44:8a:
97:a3:03:93:d8:5d:9b:ed:bd:38:b5:37:98:91:63:8e:f2:65:
b4:38:e3:14:d7:cb:e3:48:b0:2f:ee:91:e9:33:3b:04:8c:c5:
9a:1c:16:07:11:bc:67:5f:d3:83:24:c3:2f:2a:cf:6d:17:66:
3d:fa:29:c1:60:69:af:50:e9:23:a0:18:21:eb:56:7c:b5:65:
03:13:8a:1a:4f:4b:cb:2c:a1:e8:07:c2:a0:20:3e:e8:c3:0c:
8b:ff:44:ce:1f:09:f1:92:7b:14:13:e8:58:0b:7b:d9:b9:3b:
e5:a5:db:d2:70:b9:12:4d:53:1a:e9:4e:6c:90:72:da:a5:8d:
e3:af:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:58 2025 by rpki-client