Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: TqZrAz7ArO9SCKHNu6R9JZx8iwBHLO9wHKUBiiMPUh0=
Subject key identifier: 9D:11:70:B2:9F:1F:A8:CE:68:0F:03:B0:E9:46:F2:50:F1:BC:41:BE
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 01976B185F6D16781F485C05CAC8A8F35A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 09FA
Signing time: Fri 13 Jun 2025 21:00:48 +0000
Manifest this update: Fri 13 Jun 2025 21:00:48 +0000
Manifest next update: Sat 14 Jun 2025 21:00:48 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: IZziv/W/x+RubVOJ1dVIGnJXb1JocXo2wNuSrTyMx8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:18:5f:6d:16:78:1f:48:5c:05:ca:c8:a8:f3:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Jun 13 21:00:48 2025 GMT
Not After : Jun 14 21:00:48 2025 GMT
Subject: CN=9d1170b29f1fa8ce680f03b0e946f250f1bc41be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:99:5e:26:0a:8f:75:4c:58:29:fa:12:b4:
02:85:c8:34:42:78:1b:ec:9a:55:96:6f:a9:15:3e:
08:ec:89:21:a3:28:e9:6b:e5:94:37:6d:5d:5d:df:
02:73:a4:f6:d7:f8:92:fd:41:93:49:75:a5:e8:26:
b9:19:93:89:38:46:1f:75:9d:cf:2f:da:a2:19:e3:
24:5b:91:c2:7b:70:09:be:70:c9:99:3b:b3:4b:94:
08:a3:3d:8c:95:86:b2:64:af:a5:6e:a6:85:f9:c2:
d6:c2:1a:11:92:cd:8c:4d:24:17:c8:bd:fe:5e:ee:
c9:50:05:f5:e0:05:85:ea:50:a4:12:97:f9:5f:b7:
53:6a:a5:6d:5c:0e:c6:69:5a:5d:11:66:8d:d8:f4:
73:da:10:e1:5f:43:81:fa:8c:f7:6d:69:8e:1e:4a:
aa:d3:4d:fc:ea:31:90:f2:b0:ee:71:7d:ec:5b:3f:
ce:67:56:d0:7f:7a:6a:19:14:9b:83:96:17:6d:e7:
c8:78:04:47:91:83:65:f0:68:c4:3e:8b:fe:d2:17:
be:58:a9:08:cd:94:1e:c8:0a:48:19:53:af:6c:1e:
05:db:26:db:8c:c1:33:29:36:b0:8e:c3:eb:10:7f:
c2:20:05:af:98:dc:ae:14:81:62:a2:eb:ec:30:8f:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:70:B2:9F:1F:A8:CE:68:0F:03:B0:E9:46:F2:50:F1:BC:41:BE
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:46:f0:c4:89:e0:86:c5:fd:ca:da:70:d2:1e:dd:ab:9d:dd:
83:ee:d3:22:c0:fe:17:fd:4a:0f:50:6d:87:36:e4:25:d4:2e:
dc:e5:54:fe:d9:98:8d:cf:e9:c2:25:49:90:ce:f4:a4:9f:19:
08:4e:64:62:43:2f:ca:10:a9:00:19:e0:f2:d0:56:e7:93:0e:
6d:6e:e0:79:5a:ed:a7:1b:3c:35:36:6e:12:87:26:ff:88:ca:
62:79:ee:f5:61:eb:67:28:e0:7a:a4:5c:00:dd:6c:64:44:d0:
fb:a6:6d:cd:7f:36:04:62:ed:09:23:26:1a:3d:4b:8f:fe:3f:
ff:7b:80:33:a2:98:68:28:33:01:18:a8:6f:69:a4:6a:83:d0:
54:58:69:89:2f:98:55:83:b7:13:50:4d:fc:5e:d5:05:45:63:
ea:48:fa:0d:f1:6a:60:67:3a:9a:b4:a8:7a:55:1e:2b:94:0f:
06:79:50:13:d6:9b:c4:9b:76:0c:01:ec:c5:2d:3f:f8:e3:37:
e2:e5:ec:4b:0c:aa:0e:8a:c3:28:17:38:aa:7b:5b:6b:c6:85:
12:dd:07:73:42:c6:30:90:41:b9:ea:9c:5d:4d:0d:a5:4a:39:
50:e6:df:0d:92:24:65:87:e2:7d:87:35:0a:fb:ef:19:fa:aa:
ca:eb:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:49 2025 by rpki-client