Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: vK8nq1ArsLN1y6TGqPLge+pkJbi64byLC5vY8dQZ7bs=
Subject key identifier: 85:91:2B:0A:A6:35:C6:50:04:69:21:E4:36:0A:43:95:49:07:A1:C6
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019749D63D07F435DC9D9DE7BF145BB34E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0A78
Signing time: Sat 07 Jun 2025 10:01:06 +0000
Manifest this update: Sat 07 Jun 2025 10:01:06 +0000
Manifest next update: Sun 08 Jun 2025 10:01:06 +0000
Files and hashes: 1: eElEamJRXa34pPUYDX_wsosnFjg.roa (hash: A2iUP3CvC18fDfjURHdEPTZmoR2njRzEuhMxjf7TGDQ=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: WFS9ytO/atFzGsigYLbM4TtsVBpXMk4x7j5WHqDRMB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:3d:07:f4:35:dc:9d:9d:e7:bf:14:5b:b3:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jun 7 10:01:06 2025 GMT
Not After : Jun 8 10:01:06 2025 GMT
Subject: CN=85912b0aa635c650046921e4360a43954907a1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:24:8d:ae:7b:87:75:04:bf:ef:82:d4:25:
00:f2:87:30:4b:84:45:6e:6d:25:58:ac:68:75:42:
b6:22:7e:14:96:4c:df:2b:18:b7:43:6f:e5:78:e9:
1f:f5:c7:81:9c:e3:9f:16:c0:76:e5:c0:ca:12:01:
1e:4d:8d:da:b2:26:aa:a0:1d:4f:94:a2:44:6c:c1:
22:8c:36:1d:c7:45:18:7c:6f:c7:00:54:73:b1:ad:
de:84:63:a0:7d:7c:c9:88:64:8a:fa:c2:26:be:2f:
81:74:9d:be:a3:d0:66:60:f1:21:0d:a6:66:b1:66:
e9:e8:80:e0:45:11:05:a0:42:ff:b9:2a:24:21:83:
3d:ed:73:3b:c0:82:2e:be:40:d1:e4:a5:72:55:a0:
30:e8:87:01:e3:94:7b:a6:1b:bc:89:fc:a5:1d:14:
1f:1d:20:e3:c1:21:7b:e6:a5:9d:e5:72:ac:90:2c:
ab:67:d4:a7:29:5f:83:44:3b:45:2b:fa:9f:bb:12:
70:10:0c:2c:f8:ff:48:26:77:42:62:dd:d1:d9:3e:
43:ac:ed:7f:85:96:dd:1e:5d:52:d3:c1:be:a9:a6:
bd:93:c2:d5:b5:1e:6b:5f:7c:58:ef:41:b0:b5:46:
72:a8:d1:8f:bd:6f:73:ec:56:b6:96:77:69:b8:00:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:2B:0A:A6:35:C6:50:04:69:21:E4:36:0A:43:95:49:07:A1:C6
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6a:38:aa:bd:74:1c:a6:a5:8a:07:98:ed:47:07:e6:a2:a6:
2f:26:b2:66:c1:df:75:c5:1d:76:6b:19:a6:64:b5:b1:1e:47:
b2:6d:6a:9b:9b:10:32:b3:45:97:3a:8a:4c:fc:b5:56:4e:5e:
1d:54:8e:b2:83:e7:32:88:06:43:5c:7a:99:d2:30:e9:7b:3f:
dd:a2:00:f8:84:33:d7:c9:6d:30:78:fe:fb:86:70:72:56:51:
20:30:89:90:99:dd:e9:05:67:5c:d0:cf:f2:ce:cf:66:dd:07:
e0:d8:fe:0a:03:f2:39:20:0d:9a:62:8f:e2:0c:5b:3d:29:a8:
65:04:d1:93:70:03:b1:1a:41:34:13:91:81:60:b8:6b:19:74:
bc:78:d3:cb:a2:01:7d:98:6e:20:d9:e0:6a:49:5d:8a:ae:d2:
9e:0f:b4:f9:a2:ec:2f:12:07:1b:29:d8:be:c4:6d:95:29:d9:
90:1f:eb:99:b4:f2:59:ed:ab:ab:62:d8:a1:cf:4a:98:92:15:
af:66:7e:a0:01:3e:dc:3d:17:5a:e1:6e:c3:d9:c3:3f:a2:4c:
96:32:61:78:c1:1d:e4:f6:f8:ef:1c:29:29:f1:ad:60:b5:1e:
9c:0d:44:b1:12:53:1c:5b:ba:75:c1:eb:27:2e:0d:4e:25:76:
5a:73:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:07 2025 by rpki-client