Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: x49N/WRM+kre8nnNQXo3JYzrilrAadCiwHI3ssIpRFY=
Subject key identifier: E4:62:6F:A7:38:5D:28:37:5E:D4:9A:8F:C3:F4:98:3F:DC:E2:29:5B
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 01974A7A6780E43AADC2725BFBB09D5CF670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 1094
Signing time: Sat 07 Jun 2025 13:00:25 +0000
Manifest this update: Sat 07 Jun 2025 13:00:25 +0000
Manifest next update: Sun 08 Jun 2025 13:00:25 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: MoyGNfeRP1P8Mqxqx+t1SJM/ooAIGLZjI8vUJZHDL0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:67:80:e4:3a:ad:c2:72:5b:fb:b0:9d:5c:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Jun 7 13:00:25 2025 GMT
Not After : Jun 8 13:00:25 2025 GMT
Subject: CN=e4626fa7385d28375ed49a8fc3f4983fdce2295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:94:db:c0:91:f6:86:ad:52:70:5c:0b:50:
4d:24:b8:42:ad:5a:92:f2:f2:f0:88:02:5d:92:95:
df:05:8a:49:30:46:b3:f1:1a:fb:90:06:40:2a:a2:
9b:d3:f5:36:9b:49:a0:21:29:ba:a7:f8:0d:cb:dd:
72:d5:c6:d3:dc:ff:db:67:e5:b4:6c:03:e7:77:1d:
37:b6:bb:ea:c5:fb:77:22:63:3d:76:e3:e1:93:44:
9c:46:c7:0e:22:a3:7c:f6:5a:b3:c1:35:b1:58:18:
79:d7:0e:0f:6c:c3:7f:df:aa:bb:31:1f:93:f4:c1:
24:e6:b5:ec:b4:c1:a8:c9:ca:44:28:af:c1:d7:fa:
14:c4:45:51:07:e3:2f:72:89:ca:d1:1d:1c:48:b1:
05:80:0f:5a:55:52:2f:03:ab:4b:e2:77:7b:97:06:
06:61:be:80:84:bc:66:0b:8e:3d:e1:a9:27:91:a4:
46:50:e3:c1:e2:e5:d4:a8:b9:2a:14:44:5a:2a:42:
e9:c4:79:7a:10:7e:90:fd:25:f0:09:b4:a9:81:05:
17:03:d5:67:45:75:c1:f2:b9:7d:63:2a:46:f9:4a:
a3:d1:c4:84:7c:1e:f8:2c:ce:71:44:f5:1f:b7:7b:
58:6b:98:0d:10:3a:03:c7:10:79:31:39:93:e0:19:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:62:6F:A7:38:5D:28:37:5E:D4:9A:8F:C3:F4:98:3F:DC:E2:29:5B
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:23:93:88:c1:22:58:7d:34:d3:ee:bb:ad:1b:17:5f:89:60:
41:62:c3:0b:01:a9:76:27:0e:ec:7a:b3:96:04:3d:27:5b:44:
84:17:21:76:25:3c:70:fa:a4:6f:8e:ec:91:38:5b:9f:2f:68:
38:08:1f:77:13:72:dc:c7:5b:14:1c:d6:cc:94:ee:06:bc:1e:
de:a4:1e:a9:39:38:03:43:ef:a0:60:09:4f:53:ac:c5:4f:cd:
78:fb:84:00:48:c8:e5:6d:f3:d0:62:8f:ad:a8:05:39:49:ea:
52:b3:ad:67:e4:3d:06:25:0b:86:d8:d4:7a:66:48:4e:3a:51:
fb:1f:10:33:39:6c:5c:95:01:8b:ab:b6:40:e0:90:5d:25:f8:
0c:e1:ab:1d:be:a8:d6:e1:10:be:55:f8:68:b9:0d:d0:b6:bb:
90:06:e5:2e:54:2b:d9:97:d7:e9:b4:f5:8c:d5:d1:0e:61:a8:
17:c6:1f:09:50:4a:d7:6c:8e:fe:f5:d2:e3:de:8f:6f:be:0d:
8d:e2:24:ca:05:54:75:f4:2b:f6:cd:1c:9c:b3:b8:ef:57:73:
c2:91:f8:05:fb:dd:e0:94:dd:c4:60:1f:1f:e6:3a:89:5f:a5:
36:b4:70:9b:f3:50:ba:27:d2:cd:0e:84:8d:4b:dd:89:16:1b:
6c:67:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:32 2025 by rpki-client