Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: YT6OLP0QP80w0K3nokgsXyYDitL0tixIBmhjjyYzkWA=
Subject key identifier: C1:71:D4:2A:A2:E4:53:BB:E1:F8:A8:63:75:45:CB:02:7E:38:BB:78
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 01976283425C502BE66A40567FBA065DE6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 07D6
Signing time: Thu 12 Jun 2025 05:00:58 +0000
Manifest this update: Thu 12 Jun 2025 05:00:58 +0000
Manifest next update: Fri 13 Jun 2025 05:00:58 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: wiXOH4m/weXoCf+kWRT/3nFHcwiZ6aKLxhlQv+TxPL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:42:5c:50:2b:e6:6a:40:56:7f:ba:06:5d:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jun 12 05:00:58 2025 GMT
Not After : Jun 13 05:00:58 2025 GMT
Subject: CN=c171d42aa2e453bbe1f8a8637545cb027e38bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:dc:14:25:b5:82:a9:5d:fe:83:91:dd:91:
43:97:f3:3f:91:27:e5:fb:b4:12:2e:29:36:34:ed:
4a:ae:ed:a6:cd:d9:2a:16:b9:4f:37:7b:83:80:fc:
84:64:0a:6c:0a:69:47:f6:50:5e:71:89:3b:62:13:
2a:a3:00:4c:d2:a8:59:f5:0e:70:00:13:a0:c2:bb:
7a:b1:c0:be:1e:ca:6c:02:25:e9:5d:50:f4:ba:35:
2f:10:b2:57:98:f9:9d:0a:5f:0a:94:8e:b2:21:23:
94:f3:d7:3b:ab:45:ed:86:26:e0:26:d7:0e:3c:40:
49:e1:9f:83:76:fd:70:a8:79:09:ab:8d:03:68:24:
51:c2:1c:9d:d0:a7:47:88:18:71:75:47:e6:90:a8:
4b:92:56:67:40:d6:1b:ef:26:06:84:51:67:1f:b1:
95:ad:13:57:20:7c:80:9d:c9:07:85:b5:8c:db:90:
be:a9:13:ec:bc:31:3a:10:a4:c3:25:af:8c:fe:d3:
88:de:31:59:ec:a2:89:68:61:b0:97:40:4a:91:c9:
5c:c9:ea:cb:11:84:cb:11:4d:dd:82:ae:7f:c8:d3:
90:4b:f7:0b:7b:1f:a0:a1:c7:59:2c:48:7d:18:01:
e7:4b:24:17:25:8c:0c:11:e6:19:31:92:17:70:2b:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:D4:2A:A2:E4:53:BB:E1:F8:A8:63:75:45:CB:02:7E:38:BB:78
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:98:a8:56:f7:74:a9:4a:db:9d:34:09:4e:ff:ca:8f:72:9a:
05:a5:98:d8:09:d6:be:ad:e8:a7:b7:95:59:78:ef:eb:02:c6:
8a:9f:0e:0c:fc:ca:2c:bd:ac:4d:ff:60:8c:1f:69:f6:5e:a1:
ef:3f:4f:46:63:0c:b0:b6:4e:fc:b1:65:22:a1:60:fe:2d:32:
66:a9:d2:96:b1:2c:3f:a5:0c:39:76:b7:b0:e2:2d:76:31:a8:
16:3a:83:e8:24:a0:2f:be:a4:de:a5:90:2a:78:52:27:6d:48:
70:9b:5b:44:ef:a0:2f:96:2e:ff:09:70:17:41:b3:76:82:66:
ea:5a:36:c0:76:a6:9c:3f:e8:fb:96:0f:00:a8:5e:7b:f4:00:
ee:c6:83:9f:11:63:6b:e3:0d:3e:72:0d:ca:1e:d2:c9:7a:34:
ab:bd:3f:84:77:00:5c:0e:4e:d9:cc:c8:39:5c:e6:24:f3:ab:
61:de:76:5f:25:53:df:c6:67:d9:12:0b:1f:31:05:c7:8f:f6:
73:4a:5e:2e:c8:49:e6:a6:c2:1c:7b:4a:1b:29:87:2e:b4:b8:
ba:c4:fd:3f:78:82:36:7b:a8:ac:32:d5:79:03:1b:4c:2e:d5:
e3:8e:89:b8:b7:a8:7c:1c:a1:98:70:25:1f:45:80:99:bc:ee:
b2:30:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:22:56 2025 by rpki-client