Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: +okfv0iwzQ5PLctTf3+8KjGhXWbXSvSHGfFRqxaZaOk=
Subject key identifier: B3:C7:32:29:4A:E7:B8:98:85:17:AA:F5:44:23:24:DB:1D:6C:D5:49
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019749D5A2043DC4CBC11DFF49FE90E344BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0CCF
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: 1fXTEdVt2D/MwuZD5HhBneFM/BHLvHU8qSs7wtDfUbc=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a2:04:3d:c4:cb:c1:1d:ff:49:fe:90:e3:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=b3c732294ae7b8988517aaf5442324db1d6cd549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:4f:89:be:c0:9d:1f:50:67:dd:b7:ae:14:
94:c6:81:8f:92:7d:84:f5:44:99:89:02:48:05:de:
30:ee:39:5e:b2:10:c7:2c:59:0a:e1:94:6d:3f:46:
2a:92:e5:db:8d:69:7b:4b:47:56:01:54:80:27:67:
e6:09:16:14:6b:b2:08:0f:a4:65:18:51:55:0a:e4:
16:e1:10:a9:91:38:1a:27:3d:b1:53:4d:b2:71:33:
4f:f5:98:b3:6d:64:69:69:6a:25:59:d1:17:49:c0:
fc:f5:ed:fd:a0:72:79:5e:27:47:ad:5c:ee:3f:e6:
2a:74:f7:24:d3:e6:22:6d:dc:ae:0b:64:0d:3e:88:
6c:b9:a2:51:21:6f:88:da:f1:b2:96:2d:5c:47:36:
42:34:68:11:bd:5e:67:41:95:68:95:1c:bb:d6:5c:
32:d8:9d:fb:61:f5:af:72:93:4a:dc:7d:1a:29:cb:
5e:32:e3:2e:b2:71:13:53:2f:ee:68:9d:9f:f7:6e:
20:39:d9:94:62:06:64:2b:cf:5f:28:d5:b4:83:d4:
b8:4e:be:07:38:37:d0:6e:22:40:b4:d6:fa:5d:6f:
bd:fa:99:70:b8:27:62:87:6a:ba:a2:47:f5:b9:6e:
0e:91:4c:66:81:06:11:9f:30:3d:60:2f:d5:3d:da:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:32:29:4A:E7:B8:98:85:17:AA:F5:44:23:24:DB:1D:6C:D5:49
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a8:9b:31:1b:4e:40:c8:4f:ab:38:23:5b:af:6c:10:2e:9b:
d9:1a:8b:c4:ae:fd:23:d0:d8:cb:48:0c:db:74:9f:45:4a:a0:
12:68:aa:d0:1d:7b:db:6c:25:c7:5d:bf:db:c4:5e:ac:01:cf:
47:61:da:a4:eb:db:ba:eb:75:75:07:d2:34:98:73:0c:89:a1:
4d:50:bd:90:51:68:f0:c4:40:e0:db:6b:d4:98:ca:6b:87:2f:
ed:a4:6b:34:51:f0:e3:38:ec:65:75:5d:b4:4f:3e:f7:ab:62:
fd:dc:04:06:9a:f6:fe:a4:bd:bb:25:9d:44:1c:ac:03:e2:09:
c3:fb:2e:f5:41:a8:6d:79:6b:4d:24:13:7c:55:59:89:d5:d3:
3a:f9:44:e5:ae:0b:82:68:40:4e:ea:ef:ed:b1:41:0d:45:dc:
9b:22:03:87:62:a5:09:3d:ea:1d:cb:02:fd:bd:50:c1:53:0e:
f8:ae:96:de:5d:1e:30:8b:02:20:e0:93:15:f7:52:ae:7b:44:
e3:43:75:d6:8a:ce:92:b0:df:03:3b:5f:c3:cf:c4:10:19:d4:
8c:68:0d:48:46:17:a4:77:09:51:54:a0:ea:85:b1:1f:85:b4:
f2:d7:e7:f3:03:91:5b:3b:fb:35:e7:d5:60:e4:8a:7f:be:40:
85:44:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:29:14 2025 by rpki-client