Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: cmWoFr/f8Zf4Y1tg/t6KFoN/issZsIAIlx5yx/vLZOk=
Subject key identifier: 8E:2C:38:09:F9:44:2B:0A:8E:D4:5F:18:95:59:3B:FC:97:FB:F9:A7
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 0197729A826403577DE6591DF9B894EFD86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0A47
Signing time: Sun 15 Jun 2025 08:00:17 +0000
Manifest this update: Sun 15 Jun 2025 08:00:17 +0000
Manifest next update: Mon 16 Jun 2025 08:00:17 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: tPFmMtZ+z9yjl31+B9kGdyi5ybqKW8KqTQvUcGEADaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:82:64:03:57:7d:e6:59:1d:f9:b8:94:ef:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jun 15 08:00:17 2025 GMT
Not After : Jun 16 08:00:17 2025 GMT
Subject: CN=8e2c3809f9442b0a8ed45f1895593bfc97fbf9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:22:1a:45:98:3c:a8:2a:23:25:cc:38:16:
b7:22:0c:de:a9:10:9c:58:78:6e:d0:d3:c2:1f:61:
ad:2e:71:e9:b2:ae:1a:a8:8c:4b:d4:74:45:5a:43:
a8:56:f9:c6:ab:74:9e:f7:f1:75:ac:9b:a7:ba:5c:
a7:e1:75:f8:bc:bd:2a:09:c3:42:4a:ee:1e:db:3f:
23:e3:85:34:2a:96:fb:a5:85:71:23:4e:f9:86:13:
93:ef:c9:6e:f7:65:74:2a:36:e0:97:f7:26:00:3a:
84:31:9d:63:5d:35:f5:43:b1:d9:03:4c:ff:e3:26:
3e:e6:cc:44:fc:36:ef:75:35:7b:6c:9d:09:ae:fd:
14:61:c0:02:ae:1e:f9:6a:c3:85:8e:1c:be:1c:2a:
ca:9a:58:78:60:33:51:7f:fe:34:e7:bc:81:7a:cc:
20:46:8f:90:37:8c:40:ff:0f:a7:5c:f7:7b:a4:62:
45:fe:14:92:4a:e8:90:9e:6d:10:81:cf:c9:78:96:
3a:20:e8:d2:e7:66:e2:b7:c0:3c:99:fb:ca:59:65:
4a:9d:6e:37:d4:1c:62:6e:b7:12:98:0c:85:5f:4f:
4b:51:ca:a3:76:a2:f9:a1:f7:c9:16:64:c4:ae:56:
35:15:29:fb:c7:8b:b2:36:89:a0:3c:a8:07:14:4d:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:38:09:F9:44:2B:0A:8E:D4:5F:18:95:59:3B:FC:97:FB:F9:A7
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c4:e6:48:b2:87:cc:4a:0d:aa:49:2b:94:c6:a1:a0:8e:4f:
bd:58:08:48:9b:7a:50:90:ee:13:a7:e7:ce:d5:fb:c2:0c:b0:
2d:d2:9c:c0:06:79:71:44:72:bd:86:d8:d3:e6:a2:41:5c:40:
ed:14:70:dd:7c:f6:84:1e:21:30:3c:d0:83:34:d4:d4:4c:1e:
f9:79:c8:e9:0f:67:d8:6e:7d:a9:1b:ee:c1:e1:4b:54:25:11:
03:fa:f8:cf:7f:f8:0c:33:0b:71:53:de:bc:51:51:96:72:5f:
e3:91:e5:04:e7:63:ec:33:64:03:c2:69:a7:be:b4:e4:ce:74:
de:ad:c2:76:24:64:d9:29:9e:b8:f9:59:d9:d3:6b:0a:ae:07:
96:26:a0:1a:07:69:63:4b:c6:44:25:98:0b:bc:ff:4e:89:82:
50:c9:61:1a:81:cb:67:d8:3d:ab:f1:ae:0f:31:c7:e2:c5:30:
95:a3:d3:1d:dd:32:aa:58:2b:77:0a:ea:da:b7:ab:5c:02:4d:
68:6c:e9:91:5d:95:7d:d6:12:1e:ff:84:ff:0c:ae:9f:6a:51:
08:ed:e1:73:c9:e2:66:7b:31:28:a9:76:5e:c0:d4:05:76:d4:
97:2c:f8:30:d7:dd:99:ae:dc:7e:5d:92:4b:58:a1:6a:23:8b:
24:c2:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:53 2025 by rpki-client