Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File: l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier: mPfe6XiP3yar1LKsdFZpqPbbBfH9xaA56p506oOX/0Y=
Subject key identifier: 65:D7:E2:39:30:C6:AD:D6:EF:F7:59:E4:C0:BE:B8:C1:F8:71:65:B8
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 01974AE8F114841CD91340A921E5057F9E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number: 0CB0
Signing time: Sat 07 Jun 2025 15:01:09 +0000
Manifest this update: Sat 07 Jun 2025 15:01:09 +0000
Manifest next update: Sun 08 Jun 2025 15:01:09 +0000
Files and hashes: 1: WOmDR0gkDYsuG9Soke-w2reYe2g.roa (hash: qNbo7JrQ2MwJmZEbIhGXbA+hRsU9tW8mGt+CExNZuso=)
2: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: nCSCKzn5Vk7ds2vTSHDmCdVtoGVzWssWsBnJOz342qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f1:14:84:1c:d9:13:40:a9:21:e5:05:7f:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jun 7 15:01:09 2025 GMT
Not After : Jun 8 15:01:09 2025 GMT
Subject: CN=65d7e23930c6add6eff759e4c0beb8c1f87165b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:bd:67:f9:95:1f:e5:ce:f0:f9:bc:14:33:
a0:ef:96:e8:0a:f0:c2:e8:3f:d0:12:1d:7d:a9:d7:
6d:00:a4:26:e7:b8:4b:a4:af:2e:ec:42:25:ef:03:
6d:02:35:d2:dd:06:30:c8:24:9f:4f:1e:21:38:9e:
42:09:c7:27:30:3c:64:9a:5a:52:92:26:fb:d9:39:
c7:2a:8e:bf:c5:34:c4:5f:53:f2:ab:5b:36:40:22:
0c:70:4c:69:75:ea:3d:20:49:22:76:9d:c2:5b:7c:
74:23:08:01:e1:cc:01:ce:80:bc:f5:56:e0:57:ca:
01:45:13:3d:66:ee:cf:7d:a7:54:6a:ab:ea:0e:10:
13:1c:95:2b:e6:b2:ab:b6:7b:a0:f5:f1:49:21:08:
50:56:73:6f:d2:f3:53:6b:d5:19:88:09:b3:06:94:
6e:05:15:29:24:76:38:bf:c1:b9:ef:7f:43:29:0c:
1a:78:1a:2f:57:0f:07:41:48:20:7d:04:7c:42:ad:
05:1c:cc:a2:c2:51:c2:57:0a:02:77:23:68:6b:79:
5d:73:e8:c3:b2:90:c2:b5:df:fe:70:12:7c:8a:39:
a6:96:0d:ea:87:c7:3b:c5:bb:9c:4d:0c:5a:41:87:
d4:1b:e0:25:68:7c:e4:0a:6b:4b:a6:3c:e4:4a:b5:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:E2:39:30:C6:AD:D6:EF:F7:59:E4:C0:BE:B8:C1:F8:71:65:B8
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a3:5a:8f:32:78:d5:ba:77:ab:1b:66:e3:5d:dc:b6:b4:0d:
fc:0f:3e:ef:9c:6e:b7:9a:d2:a2:f5:14:03:32:7a:56:b2:d4:
02:26:f7:a7:9b:ce:85:9f:9e:12:d1:75:d6:3b:cb:55:03:1b:
5c:07:19:17:35:3d:bb:b2:25:5a:15:50:e7:73:5d:97:d2:b6:
fa:ff:90:49:27:0f:1d:90:2c:71:ff:33:23:f8:a7:c8:2e:ac:
ab:7b:83:ec:61:9f:18:28:5e:d6:e0:2c:e1:60:25:ca:a5:68:
42:a4:f4:64:af:35:2f:fe:75:8b:49:2e:e5:cc:0d:96:d8:6f:
c0:70:a7:95:22:0f:f2:8f:8e:f0:7d:c0:05:7a:1f:ea:43:72:
84:60:7d:a0:33:8d:5b:b7:b9:bc:2c:e6:4e:26:1c:5f:34:9c:
5f:a1:94:e2:4a:6c:18:68:0a:61:b1:67:f4:57:a0:df:98:e9:
c6:1b:ba:ad:83:cf:9f:80:0c:f5:09:56:d2:2a:cf:b8:f4:7a:
8f:d1:59:93:09:c0:28:b4:80:52:6d:39:55:54:9f:25:a0:20:
07:79:1d:c1:16:62:88:01:b8:68:ce:85:7c:8d:14:70:8d:d1:
97:cd:32:9a:67:aa:ce:3a:4f:4e:ac:57:74:6b:3b:6a:5d:79:
fc:67:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:15:11 2025 by rpki-client