Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: styQE37QsFvTXgsEEedWsdhDf0NN8b1ShsLJkQ1hID8=
Subject key identifier: 00:1F:49:77:C1:0E:60:F6:C5:D9:4A:2F:29:A8:2C:1B:42:A1:F8:06
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0197466755BB9081EFC4E72FAB0372630813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1293
Signing time: Fri 06 Jun 2025 18:01:06 +0000
Manifest this update: Fri 06 Jun 2025 18:01:06 +0000
Manifest next update: Sat 07 Jun 2025 18:01:06 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 9e+pWrxYm0MAk/L1Qnwe7sZKBYeajB8WmSwTJEpgTWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:55:bb:90:81:ef:c4:e7:2f:ab:03:72:63:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jun 6 18:01:06 2025 GMT
Not After : Jun 7 18:01:06 2025 GMT
Subject: CN=001f4977c10e60f6c5d94a2f29a82c1b42a1f806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:4a:56:6e:90:ff:14:c9:1d:a6:0d:a8:0c:
7a:1a:be:a0:c2:00:32:70:e6:71:a6:2f:6f:54:0f:
14:43:74:23:a2:7a:67:f2:1f:34:d1:fa:92:0f:d1:
fd:56:4e:9c:95:e9:3f:73:63:b1:93:27:4d:10:c2:
24:9e:f9:12:1f:ce:b3:ed:60:ba:81:bf:43:ee:d0:
49:4f:24:df:44:e7:28:41:85:ac:f2:c6:9c:e7:35:
bc:fa:2b:60:f6:e1:e3:a3:89:0a:79:de:dd:50:7d:
46:d9:fe:34:fe:a9:d0:b3:78:e6:0a:1c:d2:85:bf:
99:91:e0:80:f0:1a:8e:22:1e:cf:a3:84:64:9e:f0:
93:0a:04:6a:7e:73:6f:62:10:a5:5d:b1:6e:19:2f:
b8:04:ae:de:21:f7:95:c3:f2:d9:9c:fd:63:27:8e:
e7:4d:40:55:7a:c6:6b:16:60:2f:3d:b3:d4:c0:da:
df:0c:82:d7:89:58:49:b2:3b:8e:e0:4b:42:24:b9:
30:af:0b:ef:90:12:c8:a1:04:99:ab:34:79:fd:d4:
1e:48:f6:8f:bd:7c:bb:5e:91:a7:62:84:33:44:0f:
1e:43:b5:a0:00:68:a6:1e:42:14:ea:5d:61:be:54:
c5:96:6d:f1:09:46:b1:18:54:81:4f:b3:30:4e:6c:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:49:77:C1:0E:60:F6:C5:D9:4A:2F:29:A8:2C:1B:42:A1:F8:06
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2d:9b:af:d7:b7:1f:8c:31:fb:ee:2f:70:e4:f5:19:ab:17:
3d:76:98:ce:c4:a4:ad:df:24:6a:36:9e:be:a2:63:7d:9b:ff:
bc:a9:96:fe:eb:f4:a2:fd:8a:07:fe:8f:d1:ec:b9:b4:f8:82:
56:18:e0:b7:0a:4c:d5:2d:35:ea:85:8b:67:d6:77:a2:19:33:
dd:29:0b:f2:25:47:ca:5b:56:b7:8b:14:40:1f:60:e0:61:c3:
cc:1f:1b:2f:f5:2c:cc:94:7b:2c:88:89:ad:81:d1:bd:52:b1:
89:40:2f:86:39:1a:8b:8d:26:0e:87:63:f8:51:66:f3:81:14:
20:8b:31:b2:82:70:26:5e:a6:57:fa:f0:1a:29:07:57:94:ec:
92:0b:70:86:16:02:21:27:74:dc:15:cc:a8:02:da:37:59:5d:
3b:fa:3c:52:b3:e8:e7:f1:94:16:45:f6:ae:86:49:38:af:3f:
26:73:41:19:01:84:06:58:40:4f:2e:93:34:d2:4e:81:ae:1f:
42:cd:6e:4e:79:61:73:85:f7:e3:f8:1c:e3:14:02:49:75:47:
f1:1f:9f:69:0b:7a:db:07:43:7d:47:32:ca:4f:c9:80:d6:98:
57:c7:c5:59:40:f6:4a:4e:b4:73:2f:cc:d6:ab:1c:b9:d4:32:
94:db:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:27 2025 by rpki-client