Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: uVu7d3TYSt+tBpR+VEyUyWMzLHJerVpYoFVIDi/lp7E=
Subject key identifier: A9:12:00:91:1F:B0:F1:3B:C6:DA:DF:2A:DA:32:49:11:5A:02:2A:37
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 0197666002F5D67B1740DEB50D097945EA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 07D8
Signing time: Thu 12 Jun 2025 23:00:57 +0000
Manifest this update: Thu 12 Jun 2025 23:00:57 +0000
Manifest next update: Fri 13 Jun 2025 23:00:57 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: Vd2v/QUW06ID7MghVmgS/97hn8Ib+CfpcEcW5a1xAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:60:02:f5:d6:7b:17:40:de:b5:0d:09:79:45:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Jun 12 23:00:57 2025 GMT
Not After : Jun 13 23:00:57 2025 GMT
Subject: CN=a91200911fb0f13bc6dadf2ada3249115a022a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:41:2d:d8:ca:6f:ca:4f:a5:02:51:5b:df:
11:ae:5a:c6:0f:db:44:ab:97:80:c4:0e:51:e0:f7:
fa:b6:62:a8:42:e7:9d:1b:78:d5:21:06:a1:98:19:
3b:4e:5a:8d:68:79:c0:19:ec:6e:a2:1b:3c:07:f8:
03:90:bf:4d:49:c4:2a:36:d8:3d:2d:07:77:cb:8a:
c5:3e:5c:e5:0a:60:9a:89:0f:8f:0f:0b:59:02:d4:
24:cc:30:2f:cb:cb:02:a1:6a:13:15:94:1c:fc:7a:
13:b5:fa:6d:ee:db:71:2e:b8:25:91:3f:17:06:9c:
01:c7:79:da:aa:5d:26:2f:ee:85:ec:19:1c:66:84:
b2:fe:53:aa:a3:40:96:fe:58:51:8b:7c:5e:dd:c9:
9c:3a:de:cd:16:5c:43:46:29:ae:b4:d5:b4:2f:10:
93:da:51:52:b4:d0:ad:b4:09:ce:b1:21:2f:c9:a0:
44:fb:42:6f:42:45:23:45:2c:b1:a6:d8:9d:24:d3:
5b:ec:9d:aa:8e:18:cb:40:8f:44:61:8f:e8:ac:16:
a9:36:98:8a:ef:68:55:20:dd:a7:86:24:e1:09:fb:
60:20:71:11:e6:0b:66:f1:42:a0:ba:30:2a:ac:56:
90:13:af:7e:66:eb:05:84:7b:97:0b:47:a7:56:9f:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:00:91:1F:B0:F1:3B:C6:DA:DF:2A:DA:32:49:11:5A:02:2A:37
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:c3:52:ba:a3:4f:4e:42:bc:e6:a2:9d:2b:de:59:84:85:
4e:78:fb:39:a3:d4:35:4e:8c:e6:42:f3:81:e5:3f:2e:1d:7c:
47:84:63:0a:c4:3a:00:46:9f:61:90:c0:8b:a5:ce:46:4e:a0:
c3:69:b4:44:69:d4:d2:21:b5:d9:e9:42:5c:ea:6d:ad:a9:1e:
ec:1b:fc:34:f4:77:e0:92:c4:16:66:15:39:0b:f1:3d:68:cb:
79:89:fa:39:f2:e5:82:b9:2b:9d:ae:a6:88:f7:81:89:3c:2f:
61:84:4e:70:db:39:65:91:49:15:2f:42:71:b0:2f:b7:87:fd:
7f:cb:96:ee:5d:0e:8a:66:c4:53:77:eb:a7:cf:31:7d:c6:c0:
a1:21:86:50:76:1e:ab:aa:8f:b4:2f:a4:f2:31:e5:64:15:ff:
41:ed:4e:d3:f8:6c:1f:fb:64:c4:8a:62:16:c9:31:07:0c:98:
bf:95:41:f8:aa:5e:15:7d:9c:d7:8d:81:fa:f5:e0:1e:7d:fd:
45:fb:2b:58:01:d8:da:6d:09:35:cd:ea:1e:cd:cb:a6:a4:4f:
50:00:27:81:b1:6c:4a:de:09:8d:32:a3:2b:c6:dd:55:8a:a4:
9c:c2:a0:53:75:83:a9:34:14:65:c1:b0:b1:a4:a1:95:18:8f:
f4:27:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:31:53 2025 by rpki-client