Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: yYFl2Wk6SbB5+1BJCLgyi3znGTd7XVBhrL7PDidu5J8=
Subject key identifier: A8:49:34:D0:B7:4F:12:AE:F5:B8:3B:E8:6F:62:00:9B:76:B0:FA:33
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 019753B4D383FDCC34E9A55392AEF25FD9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 12AB
Signing time: Mon 09 Jun 2025 08:00:48 +0000
Manifest this update: Mon 09 Jun 2025 08:00:48 +0000
Manifest next update: Tue 10 Jun 2025 08:00:48 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: YfDtxoSXHtgdYVeLL2jd7CsH0JtCpy4c7Adff3Dnxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:d3:83:fd:cc:34:e9:a5:53:92:ae:f2:5f:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Jun 9 08:00:48 2025 GMT
Not After : Jun 10 08:00:48 2025 GMT
Subject: CN=a84934d0b74f12aef5b83be86f62009b76b0fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:5d:ad:33:00:79:e3:a2:d5:51:36:43:16:
bc:3d:b9:df:4d:cf:77:8a:67:91:e5:7a:67:e3:93:
d1:46:a4:a4:1a:e1:c7:c4:69:0a:a2:29:af:c8:7c:
05:9a:f9:7d:d9:54:21:ed:43:8d:99:95:dc:09:99:
74:f8:7a:fa:a2:43:d5:24:82:04:42:85:85:15:92:
f4:9e:89:21:60:71:3c:f3:17:cf:2e:36:05:a2:23:
32:fc:35:20:7a:4f:b7:34:7d:c5:48:1a:67:c9:4c:
34:66:e9:0b:f2:f5:b6:4f:99:c3:c8:25:9b:cb:af:
18:e4:ee:5c:24:9d:4f:ae:64:e6:dd:aa:a0:7c:4d:
4c:81:03:c1:82:b3:6a:6a:36:f6:25:99:4c:8c:11:
14:2b:41:33:3c:11:07:c3:0a:9e:39:9a:3b:30:6e:
6d:12:19:d3:ce:41:db:85:86:2a:0a:0e:81:ca:1d:
5a:72:16:ba:f0:ae:dc:09:5e:c7:b1:99:48:b5:45:
c6:69:cb:41:3c:8d:3f:df:a6:dd:ee:f0:3a:bf:a4:
2f:39:dd:e3:73:90:b3:01:fe:c1:29:01:86:96:06:
c4:3a:5a:d3:99:33:0f:45:4b:4c:ca:5c:f9:f4:7a:
42:f9:33:de:75:74:16:36:79:5a:6e:f3:30:2b:35:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:34:D0:B7:4F:12:AE:F5:B8:3B:E8:6F:62:00:9B:76:B0:FA:33
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:de:fe:0e:f7:54:d5:f3:15:24:a3:3c:5c:cf:4c:6b:7f:
80:e1:e3:e9:43:32:24:8e:53:b1:fa:6f:f6:30:6f:74:40:f0:
a4:4e:f1:7c:aa:38:7b:43:7b:ab:d4:03:e1:8b:bb:d8:6c:d6:
53:af:e4:ff:50:fb:9c:fb:52:59:4a:96:01:13:eb:b6:6c:ee:
b6:f4:e8:d6:3c:10:47:79:7d:44:ee:f7:0d:6e:68:ab:ac:2c:
89:f1:5a:99:8e:3d:4f:88:f7:d7:f1:95:b5:c1:79:df:fe:8f:
b0:a7:d7:57:ca:b5:21:e6:b3:ae:2c:97:1c:18:f6:74:b2:2d:
3c:d1:16:5c:a8:ca:14:de:4c:d4:24:47:42:6d:95:f6:96:67:
5e:b5:27:d8:22:1e:58:eb:af:80:29:df:8f:8c:c8:e2:3b:07:
4e:69:b6:ce:09:e1:83:dc:5a:c2:72:af:ca:df:a9:b7:b2:96:
7c:b9:4e:af:67:91:d0:35:12:76:5c:50:11:d7:1c:f1:87:90:
2e:f9:ac:8d:c5:79:6b:57:02:0b:a1:74:4c:b4:c9:1e:44:14:
65:00:84:82:e6:ae:1d:8a:94:98:e1:38:99:39:3c:b8:c0:37:
a4:76:0d:2d:c6:82:08:2b:38:3d:c3:a3:2e:6b:5a:24:7e:5d:
6f:95:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:25:30 2025 by rpki-client