Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: daCuJkvKa8Z+oZRLrUa3qCYjTW+0Ll82ZZGQFKvh6Y8=
Subject key identifier: 67:DA:76:95:AB:A2:8A:70:BC:9F:C7:60:B3:D4:24:5C:A3:EE:CD:90
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019754FE7521757E3E1DA97444155F46D192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 07CF
Signing time: Mon 09 Jun 2025 14:00:51 +0000
Manifest this update: Mon 09 Jun 2025 14:00:51 +0000
Manifest next update: Tue 10 Jun 2025 14:00:51 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: 2orZuViyJAshfGQuvig9awlw7BrNVm7F6U8SNkcIlKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:75:21:75:7e:3e:1d:a9:74:44:15:5f:46:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jun 9 14:00:51 2025 GMT
Not After : Jun 10 14:00:51 2025 GMT
Subject: CN=67da7695aba28a70bc9fc760b3d4245ca3eecd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:ac:b5:1c:37:7b:19:16:35:06:f0:20:9c:
f0:2c:c4:0a:60:5b:d6:81:a8:39:b6:f8:00:4f:8c:
54:f6:59:69:fa:4a:71:8e:ac:f4:ac:31:5f:b6:6a:
7e:49:b1:fa:77:77:59:91:10:a7:71:d1:cc:bb:bb:
5a:57:05:f0:d1:60:af:8a:ae:09:ae:f1:4f:79:8e:
b6:d6:73:9b:01:ed:0c:17:97:91:4d:8d:55:44:2d:
c4:1e:c3:7c:ef:a2:73:ee:b0:36:0e:49:de:1c:13:
22:c3:8d:b0:6e:ae:4d:d5:02:53:25:5e:b3:6e:e1:
d3:aa:8c:ab:de:03:9b:67:cb:4d:67:73:ca:99:03:
65:26:60:d0:a4:35:39:f4:97:b8:d5:d1:e1:83:ab:
80:fb:c0:e3:64:5e:c0:89:f7:2c:5b:30:b6:52:29:
64:52:ee:e4:35:a7:73:ef:c3:d9:d8:32:69:75:6d:
4f:95:8b:b7:f6:d7:8e:4d:94:73:b8:b5:43:8b:66:
2e:4a:36:d7:a3:2d:01:9b:07:d0:8a:9b:6c:d9:c6:
e4:16:da:03:ce:1a:5f:26:5c:11:32:5a:00:d1:1b:
99:9c:0d:d0:55:7b:74:90:bd:62:6a:8a:9b:8a:9a:
b6:de:a0:2d:f2:7e:91:9d:fd:7f:9d:c7:53:0a:bc:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:76:95:AB:A2:8A:70:BC:9F:C7:60:B3:D4:24:5C:A3:EE:CD:90
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:37:b9:5d:6d:9f:80:bc:8d:bf:ae:94:6d:d8:4f:73:8f:a9:
47:b1:5d:cc:6a:aa:6d:74:24:8b:78:f9:f6:1a:51:e0:88:7c:
e1:fd:ae:e7:95:15:bb:e5:75:cd:15:07:82:e0:0c:a2:fd:fb:
1d:b9:c8:1a:8d:0c:c9:85:a1:95:d5:67:9c:67:c0:11:37:4b:
53:4a:bb:46:1a:37:b9:bf:14:d2:2e:8b:dd:06:fd:2f:25:f3:
21:f5:da:4b:e5:8b:c0:f9:c6:c1:cd:88:b5:ec:d5:09:e1:db:
7a:c4:38:e2:3f:a1:d5:e9:58:b0:22:70:71:bd:e4:ba:33:20:
21:52:67:ad:35:cb:c9:f1:7d:12:ea:48:be:fb:d2:4b:a2:46:
28:4a:b7:2e:b7:97:f4:95:06:f1:f0:48:96:14:c3:e9:bb:d1:
eb:78:fe:58:7f:39:c9:57:41:a0:1c:10:8f:bb:4c:24:c7:af:
a1:a8:3c:ea:1f:e2:6e:40:a6:a1:54:7e:f0:ce:4a:f5:48:56:
02:13:ae:a1:fe:cc:2b:5b:9a:b2:63:63:03:62:c6:f2:aa:76:
3c:31:84:0a:63:c4:d6:fa:8c:6e:71:ed:d6:5f:f4:76:65:fe:
0e:a0:66:03:c1:21:9a:e8:b3:f7:bb:c5:d5:b5:36:a4:da:6c:
ac:9a:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:43:10 2025 by rpki-client