Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: YJrsrIpyxmsD40aJiKBuzCFlQkiyEiQOL0RCcvKjFGs=
Subject key identifier: AE:D2:30:20:95:93:03:BB:E1:7F:CD:47:B0:4F:24:6D:69:1C:03:36
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 019750467AF1B91483FE8FF150008E0C5CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:01:25 +0000
Manifest this update: Sun 08 Jun 2025 16:01:25 +0000
Manifest next update: Mon 09 Jun 2025 16:01:25 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: uL5zoK0EWCujfHyEVtJk3Rh/sRnScE+c0gYCJiBBwq4=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:7a:f1:b9:14:83:fe:8f:f1:50:00:8e:0c:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Jun 8 16:01:25 2025 GMT
Not After : Jun 9 16:01:25 2025 GMT
Subject: CN=aed23020959303bbe17fcd47b04f246d691c0336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:a4:92:bb:fd:fa:bd:3c:99:6a:39:e5:24:
84:ca:f8:e6:38:19:30:c4:6b:a8:b9:b9:e0:0e:ce:
3a:63:9c:ce:f7:4f:8b:ef:a5:9c:5e:3a:ba:3b:9c:
61:c1:7b:0c:8a:b8:c6:17:cd:27:87:a5:d4:3d:cb:
0a:52:ac:c1:8a:58:9e:79:9a:07:ba:82:93:97:10:
5d:f6:cb:07:9a:14:26:00:a2:ed:84:5c:ef:68:1a:
f7:3d:51:67:25:76:e7:9e:c7:3b:70:e8:66:69:31:
b7:8d:86:36:5e:44:67:31:9f:5a:32:8e:a7:72:43:
47:de:54:1a:65:d8:f3:ab:94:68:05:9d:3a:bd:14:
66:49:86:70:19:13:2e:e3:56:14:59:cf:23:a2:2e:
a6:db:c1:71:bc:c3:31:64:40:a6:ac:47:28:aa:2f:
16:7a:3c:2d:b0:58:46:56:dd:91:c3:7d:66:c1:81:
83:ec:d9:bb:85:f9:f1:74:8f:99:cc:75:aa:ea:1a:
28:18:4d:a9:30:51:45:13:42:fb:2d:e6:5a:75:45:
5d:37:ca:32:bd:52:36:c2:9c:43:14:78:a9:e7:d9:
3a:e3:b7:a2:f4:2f:ae:d7:8e:85:01:13:dd:dd:1b:
40:36:93:5f:af:fa:76:51:09:1e:0d:11:e2:e4:3d:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D2:30:20:95:93:03:BB:E1:7F:CD:47:B0:4F:24:6D:69:1C:03:36
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:62:5b:78:ea:78:02:a0:26:7f:f7:42:ef:64:0b:d1:1f:42:
97:a3:cf:11:ad:73:1b:00:31:72:81:a7:0e:f4:4f:e1:71:91:
92:4c:90:cc:cc:a5:0a:69:79:27:b3:ba:50:f3:59:8d:1b:4a:
33:77:20:40:ec:e4:99:ee:00:15:15:bf:af:42:a2:f9:ed:db:
35:16:ac:f1:be:ba:7b:8f:da:f0:c3:c9:12:f7:da:86:20:82:
2e:79:21:b5:70:c5:51:9d:65:b5:ec:1c:bc:48:25:45:55:c8:
00:e4:b7:a3:3e:c7:53:91:34:30:54:e7:4a:62:58:0a:69:e1:
db:d9:8e:95:7d:8b:b3:22:f8:c2:2b:73:1b:2c:18:71:88:24:
94:63:fa:65:41:92:c9:dc:35:0c:36:98:6f:fc:3f:86:21:30:
d9:2a:22:cd:73:0e:e5:b1:a2:af:59:5d:42:07:c5:92:25:69:
2d:1e:b3:3a:43:24:17:f1:2a:0d:71:78:c1:49:3c:78:5b:7d:
43:98:ec:c2:a1:92:41:cf:a5:07:72:1c:58:ac:3e:a9:6b:f6:
b9:91:64:1c:22:cd:bc:57:c1:33:75:31:33:0b:cc:5c:67:9f:
ab:49:7b:41:88:27:34:08:a0:14:49:85:d8:9e:ec:27:b6:9c:
57:7f:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:31 2025 by rpki-client