Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: G/mExpnUHPME+QMj5/9QvXyRfmkmg+ziRZ3hCLgDX1k=
Subject key identifier: 0F:AE:7F:EE:EC:1B:D4:6E:BB:78:A3:50:D1:31:CD:30:37:19:37:94
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01976139538786328C7B5BBFDB507CF37EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0A3E
Signing time: Wed 11 Jun 2025 23:00:36 +0000
Manifest this update: Wed 11 Jun 2025 23:00:36 +0000
Manifest next update: Thu 12 Jun 2025 23:00:36 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: hesBBI70EwQ/rGM74Wfpi9ScYCRvlmko2eyFmF9KLHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:53:87:86:32:8c:7b:5b:bf:db:50:7c:f3:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jun 11 23:00:36 2025 GMT
Not After : Jun 12 23:00:36 2025 GMT
Subject: CN=0fae7feeec1bd46ebb78a350d131cd3037193794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:37:ac:06:db:67:21:14:dc:a0:d0:8c:d4:
47:38:3a:dd:55:91:92:54:2a:ad:2d:eb:1d:ad:32:
4e:35:6d:d3:b1:75:79:7e:54:f2:fe:64:16:74:db:
6f:ab:e6:93:2f:a6:6d:7e:99:5c:ca:65:a9:e9:3a:
91:80:71:c8:fa:9e:d3:ff:60:01:61:c7:13:72:f6:
fc:df:9d:91:8c:5e:43:a0:07:72:a1:dd:be:35:ff:
d8:4c:bd:f1:92:f0:59:23:a7:6f:16:6e:9e:9a:05:
a4:88:fc:5a:58:dc:58:30:c5:b0:5d:02:21:f6:6d:
ac:b2:07:a1:3a:dd:46:ac:bc:59:b1:55:e3:88:d1:
f9:67:9d:26:c8:36:11:a8:e8:50:c6:a9:ec:f3:4d:
a5:c9:4a:19:92:9e:33:67:52:65:2b:26:3e:8b:40:
e8:ce:66:0a:22:18:80:2d:6c:f3:f4:2d:0c:2b:1d:
dd:b2:39:15:82:ca:98:9c:5a:29:d7:f4:2e:3e:39:
f1:b6:11:79:b0:ac:62:10:3a:39:74:02:07:84:4a:
f6:30:c1:84:2a:fb:5a:24:48:40:f6:c4:45:a1:e8:
03:38:ca:f1:a4:9d:62:60:9a:f1:3f:e2:7b:cf:a3:
f4:94:32:2f:58:e3:d4:5d:a8:45:b1:77:60:a7:11:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:7F:EE:EC:1B:D4:6E:BB:78:A3:50:D1:31:CD:30:37:19:37:94
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c7:9b:80:ed:fe:b9:a7:f1:55:14:2f:90:37:d9:83:66:cd:
3d:88:5b:a1:25:68:f3:7e:86:78:d1:69:3b:c3:7e:54:9c:b8:
bf:05:83:5d:46:a1:c8:4f:57:bf:f3:f4:f8:e8:d6:ba:0c:94:
59:7c:74:a6:11:e7:6c:d9:90:cc:3e:3d:54:d0:6d:c7:66:b1:
ff:f2:df:42:31:01:74:df:01:90:68:d2:79:2f:c8:7f:21:8a:
ac:00:bb:bd:4b:b9:fc:91:c0:66:e5:63:c6:ba:b8:44:81:fd:
5b:91:c1:34:b4:b5:9d:6f:53:3a:41:60:d9:89:d7:67:aa:f6:
79:aa:38:9c:fb:47:53:28:d2:7f:73:f3:af:2d:88:56:0b:93:
01:1b:cd:8e:8e:a5:f0:fc:fc:bf:5f:8e:32:65:2b:21:ae:04:
4f:37:25:59:76:d1:81:9c:b0:7c:fa:fa:5b:a3:44:a7:85:c8:
2e:a1:9c:a3:bf:46:fb:9e:aa:c2:b8:74:ce:12:16:09:58:fd:
cb:92:01:40:a2:60:7b:d8:a7:bb:dc:2a:d0:7b:8f:7d:7d:01:
30:0c:54:82:14:aa:f5:35:d8:c4:0d:84:36:bc:b1:59:d1:47:
db:73:b6:4d:88:1a:cc:07:46:9e:84:30:67:0b:6a:cc:01:62:
72:01:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:49:16 2025 by rpki-client