Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: KK5oZUAHA6ZFiRq0JuiYj6QxRac6OGXpD1Ws4Io/LPM=
Subject key identifier: 5A:59:AD:13:7D:18:CB:62:99:82:18:C5:87:05:EF:00:04:EC:D6:88
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019745F9348FD1395D568DD48EC6E3D9B0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 01F8
Signing time: Fri 06 Jun 2025 16:00:49 +0000
Manifest this update: Fri 06 Jun 2025 16:00:49 +0000
Manifest next update: Sat 07 Jun 2025 16:00:49 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: +LTYw46Zggqzp+IfW1xCK0b6zLxev3nmRB4sjxP22Xs=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:34:8f:d1:39:5d:56:8d:d4:8e:c6:e3:d9:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Jun 6 16:00:49 2025 GMT
Not After : Jun 7 16:00:49 2025 GMT
Subject: CN=5a59ad137d18cb62998218c58705ef0004ecd688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:5b:02:b0:fc:3f:50:2d:bb:9b:04:ff:00:
42:8d:71:1d:2b:e1:81:d3:0b:eb:6d:a7:53:02:17:
2f:b8:c4:64:11:15:ba:cd:dd:27:68:50:ba:45:e7:
03:52:31:55:d6:c9:f7:f9:bb:1a:e2:5c:50:c8:48:
c6:51:78:e3:7b:ab:c8:39:42:54:7c:9a:7b:fd:ae:
ef:d1:1f:68:73:aa:8a:8d:7c:cf:b6:f9:a7:10:f1:
bb:e9:0f:3c:38:7b:9b:80:3b:6c:99:ad:68:c7:c0:
e4:54:8d:b5:ff:39:37:1a:71:d1:79:2b:88:ec:c5:
f6:34:17:d6:1b:55:b3:aa:1d:c0:1d:df:c8:0a:63:
5f:93:0f:be:83:c6:d7:94:ec:57:52:96:9b:34:ca:
fd:8f:0e:78:e9:b6:6f:5b:3f:f8:08:f3:f9:b7:d2:
fd:af:d7:5a:db:3c:08:57:bb:26:34:53:fb:03:cd:
76:13:66:c2:8f:12:85:20:30:be:6a:01:87:b7:74:
41:55:fb:d6:26:7b:86:e8:d6:d4:dc:cf:94:f4:b3:
41:48:3f:13:bc:0e:da:c3:57:10:b3:54:df:b3:06:
c2:11:47:34:74:26:f0:29:62:52:1c:fd:05:0e:90:
84:62:24:42:c7:ac:1f:9f:55:01:f3:64:87:7a:9f:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:AD:13:7D:18:CB:62:99:82:18:C5:87:05:EF:00:04:EC:D6:88
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:66:c4:89:bc:9a:3c:0f:51:8b:22:d1:dd:79:d0:e9:d7:47:
32:b6:6f:0e:59:90:ff:10:68:a6:bc:17:54:a1:2a:63:28:8b:
61:77:40:eb:00:e0:89:d0:f8:8e:da:b8:68:d3:6f:a3:a6:e1:
44:10:1c:df:7e:ba:aa:9a:04:4f:dd:66:75:b4:72:63:9a:0a:
7d:bc:75:8c:12:60:69:a9:e7:3b:e9:69:7a:3b:2b:bf:fd:2c:
f9:3c:f4:52:bf:c5:68:da:6d:34:3e:06:b2:bc:95:2e:70:91:
4f:5b:43:9e:fa:6e:9d:78:1c:89:3c:bd:10:09:cd:cb:d2:54:
ab:29:a7:7b:f2:3b:97:1f:ba:96:a1:74:20:cc:ab:2f:ff:ea:
1c:b7:9c:32:fb:dd:2a:05:3e:4d:0d:fd:04:dd:f5:cd:17:88:
e9:88:13:97:0d:c8:2f:46:47:7e:54:44:af:a6:21:4c:ba:3a:
7b:04:04:63:49:90:15:13:5b:84:28:7c:66:98:58:6f:1b:03:
fc:78:c0:f9:f0:7c:59:f4:3b:58:a5:91:aa:d7:9c:47:ab:8d:
0e:1f:64:f7:df:34:26:53:68:1b:02:5b:54:92:c2:f6:cf:2a:
02:7b:7d:9c:91:b8:dd:fd:35:76:5a:e2:7c:39:f9:0a:91:f1:
0e:f2:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:30 2025 by rpki-client