Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: 9ATdUrQsoCz9uv5AwpNdBmMsSexFcQVOLupBGwgFWss=
Subject key identifier: C9:A9:10:BD:37:13:4E:B2:99:FC:B6:9B:5E:20:BA:35:2E:9C:6D:D7
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 0197470C5C2A230368DE7E387CF949CBB225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0BD6
Signing time: Fri 06 Jun 2025 21:01:21 +0000
Manifest this update: Fri 06 Jun 2025 21:01:21 +0000
Manifest next update: Sat 07 Jun 2025 21:01:21 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: pssFS4jWcPeY3VFmoaKK7BlxtXY4Fu5a5sfYWcMTbao=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:5c:2a:23:03:68:de:7e:38:7c:f9:49:cb:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Jun 6 21:01:21 2025 GMT
Not After : Jun 7 21:01:21 2025 GMT
Subject: CN=c9a910bd37134eb299fcb69b5e20ba352e9c6dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:3b:73:d7:67:c5:f9:4f:b3:d1:07:ba:8e:
9f:8b:da:2f:87:b3:88:f4:ee:04:6e:f1:e8:79:86:
2d:b5:64:c3:61:68:cd:c7:88:c7:4a:a9:d8:a9:bc:
c6:57:61:6c:09:df:88:50:ba:ab:a2:6a:d4:13:b3:
46:9c:fc:71:7c:41:49:db:96:39:c8:65:38:50:61:
3f:33:3d:e5:4a:f8:05:32:35:d7:7d:83:37:1b:a8:
02:2c:3d:c4:b8:49:e8:0a:a6:09:2e:e6:25:8c:76:
ac:1f:82:d1:3b:41:fe:89:28:dd:f1:68:3b:75:41:
24:7a:b4:30:fd:f5:2c:72:ea:fa:77:3d:e7:6e:c6:
bc:cd:be:04:a9:40:8b:cf:12:d7:e2:25:a5:89:db:
9f:3f:8e:86:79:9a:50:9b:df:eb:c6:bb:e9:a7:df:
93:0c:d4:51:7f:d7:95:ca:77:64:40:85:82:da:bf:
35:38:71:85:9c:30:bd:d9:a9:06:5d:7d:dc:dc:ea:
81:e4:c4:f9:c5:7e:11:3a:26:c8:ca:8d:96:26:b6:
d3:1a:d0:2f:57:31:1d:2f:fb:9a:5b:83:a8:ad:66:
fa:89:27:2b:35:a8:c7:92:24:53:b5:07:f4:87:9d:
9e:80:0e:8d:fc:f4:e4:31:e9:73:5c:05:3e:be:02:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:10:BD:37:13:4E:B2:99:FC:B6:9B:5E:20:BA:35:2E:9C:6D:D7
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:bf:f4:51:d1:8f:7e:5e:df:36:a1:79:fd:e5:63:21:33:
cf:10:b1:2c:41:88:dc:75:23:f0:ac:73:af:81:97:45:b9:b6:
85:6c:2c:97:1d:64:a1:21:0b:9c:50:8a:50:35:79:0a:5a:7c:
f1:35:18:db:ab:f9:43:4f:98:91:22:7e:d2:cf:c4:10:a6:1a:
1d:bf:ce:b0:69:66:a0:26:e6:f3:56:89:d7:8d:d0:99:9d:c1:
db:43:9c:c3:b1:fc:06:f9:c6:1d:24:4a:c5:5d:a5:62:81:b5:
0e:c5:32:e0:ea:71:7a:f0:59:30:d2:08:86:93:b4:a4:73:72:
0e:9d:50:2c:b0:fd:fd:39:76:0a:99:07:ce:ce:c6:6b:88:04:
1e:b8:ca:50:73:47:dc:ed:95:a8:d5:1d:4e:47:6e:a0:d5:81:
56:18:84:67:27:95:2f:3e:82:69:bb:29:99:fe:98:3f:a5:68:
39:0b:83:42:0a:ea:02:dc:c3:0e:db:60:e3:8b:4c:4f:ca:a9:
74:60:7f:bd:70:3c:21:bc:b1:0b:6f:70:9f:a1:2d:d9:47:f8:
65:4f:5a:40:25:78:07:3e:ec:3b:ae:9b:59:fd:62:b6:41:f2:
b9:c4:be:7e:ac:09:d9:e4:b1:8b:37:46:30:c6:d1:a9:58:34:
8e:2c:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:12 2025 by rpki-client