Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: 2Rk1+fpO1HspVbwzFJ5w3uRhbt11GoLfWCPPb5kzJy0=
Subject key identifier: 1E:84:45:15:29:D5:95:2D:87:6A:84:F4:DB:96:1E:F2:8D:76:CA:4C
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 01974A7A6C51D1C6B327D8024E2A8FC0CAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:26 +0000
Manifest this update: Sat 07 Jun 2025 13:00:26 +0000
Manifest next update: Sun 08 Jun 2025 13:00:26 +0000
Files and hashes: 1: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: SMxrgjzT4epkBBawMBcR7UpKVt2e/lrQiBuKJXn4spQ=)
2: yz6_439OmIgbPGI_9SMl-hcB7SM.roa (hash: b+VVST8s13jCLV/LOSpCV8hcczaiQ8urh6lhnrg3Cso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:6c:51:d1:c6:b3:27:d8:02:4e:2a:8f:c0:ca:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Jun 7 13:00:26 2025 GMT
Not After : Jun 8 13:00:26 2025 GMT
Subject: CN=1e84451529d5952d876a84f4db961ef28d76ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e5:bb:ae:f7:64:f5:d4:f4:c8:49:c7:10:2c:
a8:f6:5a:6a:b2:27:ea:62:94:8c:ad:dc:72:d5:7c:
5e:ee:4e:b3:3f:fb:cf:93:41:cb:ed:18:be:e9:54:
86:fa:3a:17:c6:ec:15:de:5e:24:44:a7:93:79:55:
b2:ea:57:64:94:a8:6a:aa:62:b1:28:b2:54:3d:6d:
d7:40:ba:10:f2:c1:de:ab:e6:06:f2:88:94:65:5d:
24:35:94:00:e7:fc:19:74:16:08:03:7b:fa:9f:bb:
94:72:bf:c7:7f:8e:0a:6b:d8:8c:25:5b:18:15:f5:
23:db:f8:1d:1f:3a:81:91:47:5b:34:43:93:b5:81:
d0:5b:0d:6e:f7:04:e7:47:a5:ef:a0:46:ac:68:38:
8d:97:57:e9:eb:7e:ad:c1:51:f5:f7:19:8b:69:ac:
25:70:df:83:4d:86:ae:28:26:a6:03:9e:bc:96:31:
ef:fa:c9:08:98:b8:6f:bd:5d:d9:4e:a8:0f:97:bb:
55:40:66:7b:b9:ad:72:31:05:b9:67:3a:59:02:d8:
d0:fa:ea:87:d2:b6:a7:8c:ea:21:e5:be:1e:65:f1:
90:ca:3b:75:2d:3a:ad:21:60:8b:01:21:bd:c5:d4:
04:b5:8e:85:f6:a5:57:ef:ba:15:56:31:c8:d8:90:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:45:15:29:D5:95:2D:87:6A:84:F4:DB:96:1E:F2:8D:76:CA:4C
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:e0:fa:ac:74:57:ea:67:ff:4a:a3:cf:fb:27:77:7e:d6:
e3:1a:36:cb:ab:42:a6:ed:b2:cd:41:f8:6c:bf:ec:01:eb:b0:
a1:32:d8:5e:22:07:8e:7f:42:64:14:6e:6f:e5:26:8b:97:0a:
92:00:c7:8d:a8:10:9d:2f:39:09:d6:8e:e1:1f:c7:9d:31:14:
b9:8e:ce:23:4e:76:2a:f4:62:12:1e:02:c3:b8:21:19:96:da:
d1:bf:81:76:b4:1f:20:6c:cb:e9:c3:5e:18:24:6b:be:2b:0e:
25:9c:ae:12:9a:03:0c:df:1f:3e:e4:09:6f:45:d7:5f:80:ed:
27:50:f5:2e:cb:fa:ac:e8:00:f2:d7:20:18:49:ad:4d:89:42:
b5:ea:38:b2:54:b5:4d:e3:c0:32:08:27:a1:b5:2c:3a:d1:16:
fc:f1:93:45:e5:92:8a:b5:ed:87:de:01:c9:9f:38:1a:b5:b6:
6e:b2:f0:1a:4e:d8:ed:b7:ed:b1:c7:e6:f5:97:6f:3b:df:38:
9d:2a:c1:ef:57:db:bf:15:1d:2f:f9:67:c0:dd:a2:cb:1e:d3:
7f:0d:d9:f6:d0:69:1e:d7:b9:41:0a:26:24:be:af:80:46:a1:
04:d2:4c:9d:bc:c5:eb:5a:f2:0b:6c:62:57:5d:97:91:bf:44:
14:38:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:24 2025 by rpki-client