Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: GbMA/stOYc+GVQZPV4RPpqOrr+HO2eKKVmzzyTqXOcM=
Subject key identifier: 0C:C2:85:45:8E:4A:FC:64:89:C7:FA:74:81:6E:A4:69:AD:9F:01:3D
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 01974A7ABEB7FBC9FD1188D48E9229767EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0AD7
Signing time: Sat 07 Jun 2025 13:00:47 +0000
Manifest this update: Sat 07 Jun 2025 13:00:47 +0000
Manifest next update: Sun 08 Jun 2025 13:00:47 +0000
Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: 6y2B08UQef0DUlDTJYCjn5ERkUGbUeg0PFKVJUVsdc4=)
4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:be:b7:fb:c9:fd:11:88:d4:8e:92:29:76:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jun 7 13:00:47 2025 GMT
Not After : Jun 8 13:00:47 2025 GMT
Subject: CN=0cc285458e4afc6489c7fa74816ea469ad9f013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:03:66:a4:2b:f8:88:fb:7c:88:72:76:6f:
65:3b:50:e1:a0:5b:05:3c:1e:bd:48:28:8d:6d:a0:
9e:c4:e7:af:4a:bb:22:5f:2b:0a:4b:7e:7f:89:17:
89:72:1f:89:67:b1:25:88:4a:34:87:ec:96:60:b7:
b3:3e:10:0b:18:2b:50:0d:97:0b:90:63:8f:f7:bc:
47:d6:69:49:0e:1a:01:8a:91:82:56:2d:91:3f:04:
b4:d7:b7:51:01:28:e1:ce:d9:17:64:f5:d2:73:90:
2a:c0:3b:94:21:ce:47:e2:c3:16:7e:8b:a6:36:e7:
88:31:a8:04:09:26:e3:a2:f3:8a:5f:7e:ac:51:3c:
13:7e:43:6e:97:c3:61:b6:20:1a:00:b7:af:fa:ff:
9f:46:b2:cd:97:82:20:94:ad:d9:50:74:b0:4d:79:
d0:bb:c1:0d:57:3d:e7:08:6a:9b:d2:db:81:23:f8:
8f:88:1c:d9:ef:e4:88:42:cd:84:26:02:3d:a2:03:
97:2e:15:42:14:91:03:82:47:5b:3f:94:04:8e:50:
90:8f:9e:58:29:da:35:c3:18:96:04:ff:c5:86:89:
d4:d9:38:43:ab:3f:e3:72:11:fd:6f:4a:6e:dc:94:
20:f8:dc:6b:95:01:a8:0f:82:03:e0:59:35:ab:08:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:85:45:8E:4A:FC:64:89:C7:FA:74:81:6E:A4:69:AD:9F:01:3D
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:5e:01:3f:02:40:e3:25:26:cf:65:8f:f3:60:6e:ad:5c:
b6:4f:e2:3f:61:aa:dd:47:c1:bb:18:8b:42:e1:57:6a:77:c7:
99:4b:ad:78:44:97:f2:55:d1:af:34:99:08:65:5e:8c:71:61:
0e:fe:ec:f1:5b:43:e6:2f:c6:54:ac:e1:2e:c7:ff:fa:30:a4:
f5:1a:ee:57:bf:73:05:a2:54:8e:45:c9:81:87:ec:81:48:ce:
d0:0a:ff:b5:27:6e:53:b7:bd:a0:60:42:21:b0:02:05:07:d4:
65:6a:ba:99:6d:62:30:55:1e:fc:4e:61:1c:a6:5f:71:7a:4e:
01:ee:af:4a:0d:f9:e3:99:92:ea:27:65:dc:52:82:bc:73:b6:
c1:a0:f3:0e:d8:49:fb:d6:6e:7b:d2:c3:f7:76:5b:cb:8f:42:
0b:b5:f8:fd:41:b3:9d:ab:2e:f2:63:f3:e9:4d:70:8a:14:55:
92:5d:40:ae:e0:1d:ad:a9:57:79:4c:d7:31:1f:18:1d:67:d0:
90:2a:18:d1:cb:84:e0:2e:88:5d:91:f5:c2:90:6f:2f:9f:25:
a1:c4:b9:f9:19:de:88:7c:ff:67:22:28:ef:fa:20:bc:30:b7:
7d:ca:a0:4f:27:be:21:b2:a1:3d:20:5c:e6:cd:32:33:7f:7a:
c9:1e:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:38 2025 by rpki-client