Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: 9sVyx7UG95IQHg/VfhXCIq6XnYmoYcJHhgMTSuUpUTs=
Subject key identifier: 86:72:18:A0:80:43:1E:82:91:7E:C9:40:0A:90:99:E1:60:97:A0:DF
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01974DE9DD825D035655628C57A01264524D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 1291
Signing time: Sun 08 Jun 2025 05:01:01 +0000
Manifest this update: Sun 08 Jun 2025 05:01:01 +0000
Manifest next update: Mon 09 Jun 2025 05:01:01 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: /okRPgGeyvyJCa/xH9pSsEvciQysolcFtnIkBRMZ2Kw=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:dd:82:5d:03:56:55:62:8c:57:a0:12:64:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jun 8 05:01:01 2025 GMT
Not After : Jun 9 05:01:01 2025 GMT
Subject: CN=867218a080431e82917ec9400a9099e16097a0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:b4:66:34:f3:e5:40:d5:20:15:db:12:b0:
ca:e5:5e:30:8c:41:7f:7c:cf:d2:49:2c:21:3d:da:
48:32:38:c3:eb:d2:fc:3b:09:97:13:ff:49:77:ce:
09:d1:d6:d9:37:4b:8a:b6:93:81:c2:d2:2d:fa:5d:
20:8e:c0:9f:da:94:29:a5:92:22:db:f2:ea:d9:f5:
70:df:e5:0d:40:a4:56:71:21:75:9b:04:cd:c8:bb:
bb:96:48:ca:54:4d:f5:07:3c:01:c0:a1:58:45:f0:
2e:8a:43:b1:1e:4c:f9:64:c7:f7:a5:de:f3:f2:64:
ba:e6:c9:7b:d8:69:da:a1:7f:55:08:7f:fa:fa:31:
34:9c:11:7e:e7:0d:b6:8f:38:90:6d:31:2d:45:f0:
41:5b:ef:41:0d:53:d7:9c:bc:7f:cf:67:ea:59:58:
dd:d3:6f:76:15:51:af:81:37:d1:bf:bf:03:29:ad:
12:f3:76:62:99:3d:05:0d:c0:e0:67:0b:32:3b:8e:
4a:97:2c:be:ab:e2:9f:64:9e:b2:7e:55:2f:51:c7:
05:83:75:58:ec:85:e1:24:e8:bf:33:28:17:79:b5:
67:a4:d5:35:83:24:27:4f:a7:4a:0c:3e:a0:7f:25:
c8:e6:ee:98:3d:22:f9:d2:a8:ba:ac:76:93:bb:a3:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:18:A0:80:43:1E:82:91:7E:C9:40:0A:90:99:E1:60:97:A0:DF
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e6:e5:c3:01:3f:be:3b:08:59:44:ec:31:ac:b0:9d:bd:f2:
73:82:50:ae:d0:9e:c2:ed:eb:f9:38:c6:c5:bd:35:30:b9:f8:
75:31:f8:8e:41:f1:90:df:ec:08:37:46:43:a8:53:18:97:ae:
58:23:0c:6f:9a:a6:76:82:ed:2a:9d:ac:01:6a:d1:0d:15:e2:
b1:68:65:74:85:0d:f4:89:65:b6:c7:a4:0b:cf:fa:53:ff:4f:
22:a2:5a:a9:76:73:19:17:a8:4b:9c:da:2c:13:7b:69:4a:5d:
00:7f:de:4e:78:e5:dd:06:83:d7:f1:a3:21:d4:b7:10:9c:8f:
1a:2b:1c:39:14:39:5a:df:1b:f0:6d:84:24:ef:7a:95:29:ee:
82:d7:7e:82:84:79:86:2b:28:9e:77:2a:ba:6b:66:c4:83:6f:
51:fb:88:b1:d0:c7:8c:c6:a3:1a:20:45:cc:32:8b:ee:e5:5e:
8d:04:09:b5:14:29:e1:ab:0f:26:2b:84:31:8c:d7:08:23:14:
f6:c3:7e:77:6b:25:9d:70:6f:19:03:d2:72:90:4c:0a:10:91:
2c:50:1a:0e:43:e7:81:c6:dd:2a:94:64:bb:63:8d:74:5d:34:
38:59:b1:e7:42:fd:87:09:c9:8c:d1:87:47:07:94:b5:4a:c8:
a5:32:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:33 2025 by rpki-client