Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: bFg2FY5fTajK3a+ldBCV0YSlsLSsmKM1b2nmsdCDS6o=
Subject key identifier: A5:98:89:60:77:09:A2:C8:A3:12:CB:7E:AF:6B:38:0A:55:6D:B9:97
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 01974FD7C5D5A01D809AC4FB1B78EC1B45A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0E47
Signing time: Sun 08 Jun 2025 14:00:30 +0000
Manifest this update: Sun 08 Jun 2025 14:00:30 +0000
Manifest next update: Mon 09 Jun 2025 14:00:30 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: UjVI+4SjR6hM8wqplJUMgIszJw1biAQ9dxAKZ9zTON4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:c5:d5:a0:1d:80:9a:c4:fb:1b:78:ec:1b:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jun 8 14:00:30 2025 GMT
Not After : Jun 9 14:00:30 2025 GMT
Subject: CN=a59889607709a2c8a312cb7eaf6b380a556db997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:81:c6:5e:1d:ac:ff:d8:63:5d:f0:5a:06:
22:41:ab:16:c5:3e:b7:9f:24:e8:34:e1:0f:1b:32:
5a:06:fd:f4:e5:76:5e:b2:98:fa:69:04:f5:12:97:
ff:70:94:2e:51:a6:ff:ee:03:e9:1d:b8:ed:22:9d:
c3:3b:e8:9e:b5:5e:5e:ef:e7:fc:07:08:03:ce:b8:
90:f9:77:f4:83:65:44:4e:e0:fd:86:dc:c6:5f:5b:
08:55:b3:1c:18:4d:10:4f:52:95:bd:af:f7:d5:3c:
cd:0d:65:05:dd:9b:5a:f7:6d:9a:8e:a1:0f:84:cb:
0f:4f:fe:05:f6:3e:78:13:69:b6:33:5d:bd:b3:62:
6b:16:c1:99:14:ed:cf:85:cb:c2:85:66:03:e7:c3:
8b:a3:76:cf:9b:e6:ba:d8:76:0a:19:80:15:43:27:
96:c2:6d:8c:c2:f0:a8:7b:63:3c:58:66:5b:73:44:
a0:5b:eb:1e:37:b6:34:19:3d:04:7a:a3:1f:c0:58:
8b:21:56:f6:72:ef:ba:ca:db:5d:a9:ad:04:eb:c3:
0c:95:b5:a7:23:fa:20:3a:b0:e8:4b:e5:df:8d:1e:
56:4f:71:6a:bf:99:08:3a:fc:94:e8:10:27:c0:85:
ce:d8:ec:b6:cc:e2:6e:ab:b2:49:be:de:70:a1:2e:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:89:60:77:09:A2:C8:A3:12:CB:7E:AF:6B:38:0A:55:6D:B9:97
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c2:6a:74:2f:6a:b4:c5:2f:a8:38:65:d1:bd:aa:20:1f:fa:
38:d2:ea:b8:69:ec:6d:0f:16:93:94:b2:e1:a9:39:41:b8:e1:
5e:54:9d:f3:d2:da:0f:44:b8:5b:ad:ba:e3:fe:2a:c1:8e:0b:
15:41:36:53:a8:08:b7:51:29:7b:4b:43:98:0d:15:3b:c6:74:
f5:84:ec:b3:c9:65:a8:6e:e9:1b:8f:e1:b5:c1:03:d5:9c:a5:
09:fe:19:a8:73:f1:68:31:c1:21:0a:49:39:b5:42:3e:66:c2:
34:3a:72:32:08:c9:b1:8c:11:01:ce:66:2f:a2:81:6c:c1:20:
d0:ef:8c:3e:ce:88:39:5f:30:d8:16:70:28:01:f6:ea:03:b6:
25:0d:56:bf:b0:7e:97:8d:db:ef:0a:6e:18:02:d3:e9:74:6a:
cf:02:64:3d:15:91:6d:5c:ac:5c:73:99:22:14:3a:92:7c:aa:
e7:20:ab:9c:d4:21:cc:a6:5b:7b:a8:ff:b0:48:ba:c4:c8:f7:
48:dc:f3:95:ff:98:4a:b6:11:6d:0c:73:00:d7:03:a9:2f:e4:
67:32:33:44:7d:3e:04:9a:b3:0c:8f:b8:5a:d7:8b:a9:7b:1c:
39:fc:c1:42:6b:7f:8a:84:59:e7:7b:d2:54:05:46:3d:b5:32:
27:94:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:57:17 2025 by rpki-client