Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: FVQhK1y21gp+hRrFW4Y2IHo9OHb9DjqQUb7fiApOPxg=
Subject key identifier: 3B:B8:A9:AB:B6:45:B4:24:B8:31:2F:BD:4A:A2:99:57:49:5B:7E:C4
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 0198499C6D3C4EC0BF6576A77DC48B14D58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: WCkW7Ns5Sx96bEc4RCD2QSxa6lFgJSYe9/oorYcPcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6d:3c:4e:c0:bf:65:76:a7:7d:c4:8b:14:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=3bb8a9abb645b424b8312fbd4aa29957495b7ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ed:9c:11:5c:88:7d:0f:f1:0d:5f:ba:30:
0d:04:55:aa:af:f1:aa:23:fd:e4:d6:6a:eb:9d:84:
54:1f:2e:b6:81:92:6d:74:f6:84:86:b9:b3:a6:0f:
ad:26:cc:4a:93:fa:59:e6:71:53:f0:83:f1:d9:55:
ff:7d:f6:43:68:ac:88:14:b2:74:d8:f4:3a:df:7c:
c2:3e:a7:04:02:c5:91:80:1b:00:32:b9:e4:ff:76:
88:e4:be:82:3f:d7:a3:80:a8:6c:f7:a3:2a:19:6a:
5d:c8:8b:de:d7:ef:f9:f4:5f:6a:b0:17:7e:e6:2b:
c9:c6:b9:96:43:2f:78:c8:ee:46:5b:30:ce:59:62:
4e:71:4e:f9:0c:4d:93:66:c2:f8:d4:6f:39:d4:58:
54:b6:cd:d4:c7:96:ae:41:8b:f1:45:56:dd:5f:24:
e3:39:b4:71:2a:d2:83:92:83:10:0f:08:39:55:e2:
18:71:c6:c9:23:73:0f:8d:b5:2b:3b:92:ac:14:fc:
57:c4:14:7d:bf:a3:cb:0c:0a:ac:81:e1:7d:59:8e:
99:f4:64:7b:1a:d1:fd:0f:d7:3d:d5:1c:79:0c:50:
03:e8:d9:dd:76:3f:c8:22:27:e0:ea:e2:5a:72:f5:
23:3c:73:9c:6f:21:0a:ca:39:ef:76:bc:84:f1:d1:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:A9:AB:B6:45:B4:24:B8:31:2F:BD:4A:A2:99:57:49:5B:7E:C4
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:f0:fd:fd:6c:3f:f3:c9:44:5b:13:f8:4d:7b:81:f3:e3:
4c:60:f7:cb:ae:da:19:8b:16:53:27:01:62:ac:c4:9f:a7:20:
7f:a6:66:09:c4:b3:3d:b7:5c:6b:02:cc:e4:29:7d:a6:26:7b:
1a:23:e2:81:5d:eb:50:1d:22:61:5c:6e:7b:d1:6b:8c:58:23:
85:c1:bf:68:15:a9:c2:06:cb:3d:03:f9:62:7e:9a:a3:ad:90:
30:97:7e:b1:f3:e8:56:64:c4:5a:2f:08:87:6b:43:58:45:56:
5f:29:4c:aa:f7:bc:2a:2d:38:9c:d2:07:64:f9:95:d1:06:e2:
fc:08:ae:6f:4a:14:f0:9d:1c:6c:02:3d:27:f3:65:2e:db:62:
1a:30:ea:49:e2:f8:c8:75:43:b2:00:4d:50:bc:d8:4c:ca:2d:
97:04:62:90:05:23:79:ca:8e:bb:0b:96:1a:cb:3c:a9:e8:95:
e8:f8:e4:b2:fc:ab:c5:35:0e:f4:42:d7:78:4c:4e:3b:47:27:
56:0f:e1:ac:65:f5:23:ee:e9:bd:d7:da:bf:25:ce:3a:35:de:
9f:92:d6:bf:8d:73:6c:73:d9:0e:23:8e:0b:c3:dd:57:0b:1d:
46:f5:ce:dd:82:59:7d:83:46:b9:2e:8c:84:c7:a3:f2:9c:0d:
b1:67:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:31:27 2025 by rpki-client