Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: bnv5CibQ8+UObD6JM8I1kDYusLuwATJa/RzEfOkKOhA=
Subject key identifier: 67:6E:5B:CC:1D:56:38:12:F8:15:51:CD:73:38:B2:BA:22:7F:7B:D6
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 01974C68FF20E87D5978460ADB7B8F7C0E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 0163
Signing time: Sat 07 Jun 2025 22:00:38 +0000
Manifest this update: Sat 07 Jun 2025 22:00:38 +0000
Manifest next update: Sun 08 Jun 2025 22:00:38 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: 5BngoI0gY6LYdvg3NPjFgyaIyMlCpQ7uTEqunNEP2Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:ff:20:e8:7d:59:78:46:0a:db:7b:8f:7c:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Jun 7 22:00:38 2025 GMT
Not After : Jun 8 22:00:38 2025 GMT
Subject: CN=676e5bcc1d563812f81551cd7338b2ba227f7bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:5d:c6:94:e7:b9:b1:0b:bc:3d:27:26:05:
13:40:86:e0:27:22:48:7c:b1:29:e7:1d:9f:bb:ea:
d1:8e:66:e2:ea:f1:b9:0f:db:ec:30:d3:d3:01:c4:
b1:c5:ff:39:e8:8c:b1:6d:be:ae:4f:86:69:9d:c0:
a3:6e:3e:f8:9c:a9:ed:92:6f:9a:c8:59:6d:68:86:
bc:be:81:71:0d:71:97:de:ac:d3:4a:49:3b:16:da:
46:df:9c:2c:78:67:cd:f7:20:34:8f:18:bc:9b:54:
4b:ef:5b:da:eb:bc:3d:12:6a:52:31:cc:fe:0e:e7:
a4:6b:3a:f8:c7:e5:33:ff:c5:d7:df:f5:bf:ee:20:
bb:e4:d9:00:e3:de:a8:0d:84:b4:d7:20:4f:98:46:
27:60:1b:ca:26:62:80:c9:d9:10:40:52:7e:a5:f3:
fb:cf:43:8b:cf:3c:50:31:97:89:d9:0c:e2:50:71:
fe:be:2c:e5:bc:a1:3e:95:82:c4:46:d1:52:a4:43:
12:68:ec:58:29:2d:65:3c:b0:11:de:3b:3f:4d:ef:
65:02:38:77:54:19:d2:56:af:d8:69:34:33:81:63:
4d:16:06:c6:18:7d:28:bc:a5:71:b4:cb:ab:e0:88:
ed:23:7c:6b:07:f6:11:2d:d7:f0:d6:5e:42:ec:ab:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:5B:CC:1D:56:38:12:F8:15:51:CD:73:38:B2:BA:22:7F:7B:D6
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:30:c9:f1:6d:96:4d:5e:c2:00:80:5d:c3:92:8a:91:7a:
eb:18:82:6a:63:67:2b:df:b9:31:ea:9b:13:8a:37:8f:1f:ec:
07:df:41:0d:0c:97:21:d3:c3:34:90:a7:b0:79:ea:94:51:81:
c0:86:fc:ba:a4:16:db:56:6c:c4:de:61:89:44:a2:62:24:47:
d4:29:71:69:6c:ee:63:69:3a:8d:e6:30:f2:2e:ba:c8:60:a3:
8a:49:bf:14:34:52:d5:9e:5a:e1:00:c8:77:3d:a8:74:97:05:
70:62:f1:26:43:8d:a7:2d:d8:a2:cc:49:16:d5:81:e6:e6:cb:
86:0b:a2:98:c3:50:41:7e:fd:05:bc:e5:9c:64:eb:15:5d:20:
f9:02:f9:3a:6f:e6:67:71:fd:35:e2:f9:ec:37:60:00:21:ce:
da:f6:0a:56:a5:05:d3:dd:5c:04:b7:0f:c4:df:75:ac:20:a7:
9f:cf:10:2f:fe:98:c7:d1:ae:90:e2:45:fa:ef:b9:e6:e3:95:
69:54:2b:53:a8:e6:9b:d5:5c:0a:d2:e3:ee:d3:6a:bf:bc:84:
46:dc:f0:4c:72:35:54:16:a0:75:95:06:f1:f7:c4:00:df:7e:
d9:6e:dd:3a:ab:a5:3e:3e:48:45:cf:0f:6e:d8:5c:02:70:79:
28:1c:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:54 2025 by rpki-client