Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: WHxZKUyvPc7czi9P/ugFRd5L8ZQ/hpu19OF4mlG/MsQ=
Subject key identifier: 20:F9:B0:86:E3:9E:99:9C:23:EA:58:2A:8C:F0:48:C2:73:B6:72:77
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 01974CA02E40907DE8C6DD50F8261EDFC3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 0531
Signing time: Sat 07 Jun 2025 23:00:55 +0000
Manifest this update: Sat 07 Jun 2025 23:00:55 +0000
Manifest next update: Sun 08 Jun 2025 23:00:55 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: eC8/0xGXDwXQmnoOM3EO+SOc3kVc6jCOLreCENEe3mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:2e:40:90:7d:e8:c6:dd:50:f8:26:1e:df:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Jun 7 23:00:55 2025 GMT
Not After : Jun 8 23:00:55 2025 GMT
Subject: CN=20f9b086e39e999c23ea582a8cf048c273b67277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:fa:a5:9e:2f:1e:9e:6e:23:0a:ff:e6:fb:
6d:b2:e5:41:cd:e8:0c:84:93:95:b7:e8:59:a5:1e:
4c:ef:66:66:9b:81:be:6f:fa:7c:41:7a:9a:e5:f4:
0f:eb:dc:e3:c7:d2:7d:f2:a9:b3:28:1d:4f:46:64:
35:21:0e:c9:a8:bd:6c:25:9c:4a:8d:85:33:32:52:
77:57:01:09:a2:34:b4:15:de:79:3a:bf:98:8d:c5:
f7:8a:33:09:3e:c4:76:18:79:18:7a:0c:56:93:86:
1b:05:6e:1d:78:26:08:56:5d:ae:46:d8:58:e3:eb:
b0:cc:da:95:c0:8a:0f:47:04:ab:82:36:e4:fd:b0:
ed:bf:f1:b5:92:f2:3e:d2:73:63:8a:69:15:29:46:
19:9b:cf:ca:fd:3e:50:a6:40:93:5b:22:ca:e5:d2:
ca:a5:91:24:76:ef:b2:2b:8b:a9:91:cd:18:33:64:
a5:a3:64:eb:9b:54:01:6d:f5:15:99:87:77:7a:7c:
22:ce:89:ef:b5:7e:0c:06:85:6f:58:cc:12:5a:f7:
c1:5f:76:c2:12:fd:0a:16:c3:bd:0b:60:5e:52:e7:
5c:af:4d:be:eb:46:60:e8:9e:5c:57:58:83:5a:b7:
f3:ca:3b:30:c3:8d:01:5f:83:41:79:32:f6:e4:75:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:B0:86:E3:9E:99:9C:23:EA:58:2A:8C:F0:48:C2:73:B6:72:77
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1c:a6:a9:cf:90:ed:76:13:7f:9a:6f:2f:6a:47:20:4c:d0:
ae:73:fd:66:62:71:15:b3:27:a6:2e:4e:d7:a5:d2:e1:0d:b9:
19:23:fa:8a:9b:d7:42:b2:46:95:f8:82:9b:73:53:2c:2e:1f:
0e:11:d4:3b:5a:ef:e7:0d:75:2a:71:c3:ed:c0:ac:ab:36:1e:
3f:f8:0f:e5:2f:8d:b1:88:46:5d:5d:fd:5a:29:59:1b:52:8c:
11:db:77:ce:b0:67:d0:76:33:01:c2:08:d2:c4:95:89:78:bf:
5d:89:b0:b0:03:0d:73:bf:f2:8a:9a:73:50:c5:1e:11:71:36:
a6:1d:1b:89:14:c7:73:78:51:f3:4f:da:52:1c:16:16:0c:5b:
01:08:62:33:9c:38:96:d9:6c:c1:52:1b:22:07:42:c7:9f:81:
cf:d2:1c:a8:e7:f7:73:e7:f3:02:23:bf:f7:8d:cc:73:56:f2:
9e:ec:00:d1:63:0a:3b:66:21:15:c6:8f:31:7a:ea:0f:ee:41:
d2:9d:df:43:66:e0:a2:8f:ad:0b:f2:ec:ea:9d:ba:46:ad:3f:
8c:75:6f:27:b1:62:53:b4:b0:f7:8a:37:36:76:bf:cf:ba:b7:
0b:cf:b2:70:de:0b:71:5a:e7:d9:58:d1:d7:25:0d:8b:65:e2:
ab:5b:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:22 2025 by rpki-client