Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: VMjz/XcAHNDM3PpvrF06Fyhl/XIIK/204ETHwSOk3CU=
Subject key identifier: 4D:AB:84:E0:AD:27:40:43:E7:3A:B2:95:5E:44:21:D2:2A:CB:A7:97
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019761707E101464E7EA8BF6B6B22AF368F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 09F5
Signing time: Thu 12 Jun 2025 00:00:51 +0000
Manifest this update: Thu 12 Jun 2025 00:00:51 +0000
Manifest next update: Fri 13 Jun 2025 00:00:51 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: YxrF/RRgenqpimj5Ri0mY5NQe1RWAT9+wNPuhPYGH2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:7e:10:14:64:e7:ea:8b:f6:b6:b2:2a:f3:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Jun 12 00:00:51 2025 GMT
Not After : Jun 13 00:00:51 2025 GMT
Subject: CN=4dab84e0ad274043e73ab2955e4421d22acba797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:fe:20:9e:09:0e:d6:ef:e9:de:33:2a:e2:
50:17:4f:ae:3f:f3:fa:8a:11:2b:0f:35:3e:ad:01:
8a:21:b6:3e:0d:88:f2:0a:be:dd:dd:19:84:c4:72:
aa:11:ad:67:b5:d3:57:42:a5:57:df:d8:91:5e:ef:
02:0a:0d:be:3e:19:c1:33:59:88:54:02:4f:55:fa:
de:8e:9e:59:60:1a:43:db:08:68:44:29:4d:ba:d7:
64:42:26:6a:75:47:4f:64:c2:b4:71:c2:d6:3d:6c:
2b:b3:96:fd:9d:4e:26:bc:97:da:58:da:33:f6:07:
b6:5b:99:1a:4e:5a:1c:09:6f:81:0a:51:b9:29:3a:
d8:d2:c5:02:f4:e8:70:84:01:f7:28:2f:3a:5e:d5:
87:a9:00:22:25:c4:53:44:0e:c1:c0:57:75:0c:43:
cc:58:87:e0:59:11:92:ed:63:ae:a4:90:a8:8f:cc:
0f:d7:52:4b:60:f6:27:85:b1:0c:1f:d1:a1:87:f0:
b1:9f:59:ef:68:28:85:73:1e:f2:46:08:40:ba:e8:
7f:61:15:16:82:83:47:dc:ed:7a:ba:81:02:02:30:
d8:e1:8e:04:0a:d7:f8:ff:ff:52:89:4d:19:c0:1e:
1c:72:40:41:f8:4e:ab:b5:92:48:86:b4:b7:c1:ec:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:84:E0:AD:27:40:43:E7:3A:B2:95:5E:44:21:D2:2A:CB:A7:97
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:3f:df:9d:81:16:4b:cb:d6:e7:74:75:6c:5c:3c:64:94:
ad:c2:aa:b0:66:0b:13:c1:6b:c3:60:6c:43:06:8d:46:3a:fa:
5b:45:5c:a6:45:35:44:cd:47:b2:35:cd:45:a1:a3:04:df:f7:
39:c3:b0:fb:41:66:7f:f9:2b:7e:53:35:15:14:87:d8:e4:24:
64:93:33:97:ed:62:c4:f4:c3:5f:f2:50:a6:2a:63:60:53:1a:
25:1b:21:b5:8c:47:6c:4b:fd:53:18:b6:ce:ff:00:ea:36:a9:
6b:db:f1:9f:6d:6a:d8:30:9b:94:d5:62:d4:1e:47:d8:ed:be:
fb:22:82:2f:32:93:eb:0d:b3:64:cd:bd:67:2e:fe:79:5a:48:
07:b1:ae:10:08:06:50:40:6d:2d:b1:76:9a:18:28:eb:53:73:
f7:a7:a5:2f:ce:ac:a2:31:37:50:68:23:e4:b9:86:9a:44:79:
d2:10:75:54:fe:54:df:c2:6c:fa:71:90:e0:30:32:db:25:ab:
b5:80:59:94:fb:d9:fe:86:66:0f:fc:42:d4:be:e3:24:62:05:
85:e0:8e:17:bc:92:fe:2d:43:d7:ae:4d:59:4a:9c:46:70:9d:
23:3b:16:26:f8:41:68:9c:84:88:92:39:09:12:5c:6c:4a:a9:
b6:f1:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:33:22 2025 by rpki-client