Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: ntKXIMHAsQNXF6vziFgHYv63trY4FPMQJm+RdAVpdwE=
Subject key identifier: 97:1A:1D:FC:05:3B:B9:75:D9:8A:9D:D3:A7:CD:12:E2:52:B3:DB:8A
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 01974AB16583A69696EEB8FAE3E4EC400363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0E91
Signing time: Sat 07 Jun 2025 14:00:29 +0000
Manifest this update: Sat 07 Jun 2025 14:00:29 +0000
Manifest next update: Sun 08 Jun 2025 14:00:29 +0000
Files and hashes: 1: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: KfaRDdsNBRxhjF+S1/wPqbB+mW5Xme5DJVVYYk4mFeQ=)
2: oEKdXw4w7e_1s4z2e7tOx4lNx0c.roa (hash: YjHL6/typreJGiDTssJHq0i4gZ1mztxzHYUdqtYA8ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:65:83:a6:96:96:ee:b8:fa:e3:e4:ec:40:03:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Jun 7 14:00:29 2025 GMT
Not After : Jun 8 14:00:29 2025 GMT
Subject: CN=971a1dfc053bb975d98a9dd3a7cd12e252b3db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:dc:f3:5b:c4:5b:93:27:f3:1d:2c:b6:6d:
de:a9:0d:9d:42:4f:36:c8:7e:7f:5a:39:86:17:6f:
62:d7:25:70:da:3a:76:ba:a2:4b:0a:40:41:2e:3e:
2b:15:28:82:4d:1e:47:bd:c1:c0:bf:21:5f:69:22:
b5:bc:8e:c8:ae:a0:78:fc:ad:ad:71:b8:53:8b:2a:
4c:5a:0e:88:65:f5:02:fc:e0:72:a9:61:67:52:71:
05:b0:f6:51:2b:d8:98:79:e6:6e:3e:f0:27:b1:31:
ad:18:d0:32:a7:69:cd:15:9d:ae:87:46:b8:73:93:
e8:0d:bd:ac:c8:40:4a:d2:54:56:5a:71:1c:e6:af:
0b:f7:17:dc:0c:17:92:2e:1c:fd:44:ab:4b:9e:a2:
84:62:50:67:39:e3:e8:a3:14:61:8e:96:23:30:cb:
ac:6d:4d:22:94:94:c8:43:68:54:47:47:68:41:3a:
7d:2b:b9:9b:a3:34:e9:99:53:67:65:5b:c0:40:20:
43:76:e2:c0:7d:04:68:b3:78:d2:6a:e7:53:09:c1:
63:29:c4:14:c4:db:e6:db:0c:d6:ee:e1:28:07:6e:
f9:b1:2e:1b:fb:e8:ed:4a:9b:30:89:fd:58:2f:d4:
59:ea:84:15:0e:e7:44:7c:10:c0:bd:fe:67:2a:b4:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:1D:FC:05:3B:B9:75:D9:8A:9D:D3:A7:CD:12:E2:52:B3:DB:8A
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:57:93:0f:08:3f:c4:59:9b:e1:8e:6a:aa:e7:dc:7d:11:a4:
6d:5f:73:99:b1:b4:0d:41:21:3b:9b:3e:2b:01:08:e0:cb:95:
34:33:b8:89:23:b8:a6:f7:c7:36:dc:f1:14:e9:88:15:af:26:
62:0c:56:d3:dc:96:a4:23:dc:bf:d3:dc:d3:ba:fb:c8:a3:26:
74:e2:08:a5:91:ea:6e:a1:ff:fd:a9:f4:d3:27:29:b2:58:f6:
d4:a6:8d:f0:2e:7c:22:ec:6c:7d:87:80:f4:03:6b:e3:4c:52:
45:dd:e8:c5:3b:ea:33:e2:7c:a1:7e:51:bf:03:90:72:6f:a0:
75:30:37:07:4a:c0:91:00:f0:ce:50:c4:00:1b:f0:33:d3:6f:
1d:18:02:b8:0c:ec:dc:45:2b:ee:b5:a0:03:df:7e:f6:e6:21:
5b:a0:ef:f4:82:aa:54:f5:f0:f4:de:06:52:7c:dc:3b:5f:9d:
d0:88:79:5f:ec:e6:d3:c4:bb:36:1f:5d:39:ac:c7:f2:4f:2a:
af:71:5c:0d:54:b8:4a:de:a2:04:10:f3:16:23:c2:43:43:0e:
96:0f:f9:fc:04:95:6a:ad:1d:9d:51:4a:e8:22:21:1d:52:61:
be:77:7d:a2:bd:66:d5:52:e9:cc:ef:3b:d2:7b:bd:f6:f8:13:
a7:1c:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:45 2025 by rpki-client