Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: RBBsnoXkXqiYukSC+vQcuKwQKVIt4j4WTT+wQZ4bkXs=
Subject key identifier: 90:E5:B7:37:8A:B8:6A:2B:9D:C3:EF:D3:03:13:68:C5:1F:1E:8D:AF
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0197C9F12A57196F27B9340981980B4ED07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 019F
Signing time: Wed 02 Jul 2025 07:01:54 +0000
Manifest this update: Wed 02 Jul 2025 07:01:54 +0000
Manifest next update: Thu 03 Jul 2025 07:01:54 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: gxFVN3JXVvSVdyeQPOFKLwJt+U8x78dySJKJp8C7euw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:2a:57:19:6f:27:b9:34:09:81:98:0b:4e:d0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Jul 2 07:01:54 2025 GMT
Not After : Jul 3 07:01:54 2025 GMT
Subject: CN=90e5b7378ab86a2b9dc3efd3031368c51f1e8daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:21:fa:5b:96:fd:cf:75:4b:35:fe:17:bb:
09:d5:e7:af:b0:ea:a0:4b:69:a4:7b:b3:c7:98:10:
f6:ca:7b:42:df:7d:29:82:0c:03:e7:55:52:42:84:
9d:56:8b:ec:19:9b:fe:da:9a:e4:25:45:c9:18:4b:
8f:4c:e9:68:2e:90:bf:24:40:bc:aa:eb:07:c7:7d:
76:e5:dc:03:d3:84:2d:8d:75:cd:9a:e7:cf:82:4c:
a4:e2:5c:7d:fb:7b:a4:25:10:2f:f3:df:38:da:d5:
88:f6:b4:98:a7:de:18:9f:68:3c:f7:b2:c3:e7:e5:
af:73:da:b2:13:92:f5:be:67:06:13:05:3f:64:aa:
f8:87:e1:c9:f7:c6:ad:c1:3c:98:b4:e7:3e:3f:df:
e2:9a:d6:e3:a1:6a:d7:97:96:f4:8c:3c:04:2e:17:
d9:97:40:aa:8e:30:15:c2:d9:87:d1:27:4b:b9:69:
aa:18:1b:12:ef:85:14:de:3b:2c:14:9a:55:90:1e:
fd:d9:77:7a:1e:51:3a:45:1c:07:c5:11:a7:f9:af:
96:d3:f5:99:12:e9:8c:74:32:3f:a9:6c:80:57:bd:
b0:c9:6d:63:e2:fc:69:ca:bb:e0:aa:8b:31:fa:af:
d2:b8:d5:22:f0:e4:7c:e3:5e:94:4f:62:c5:56:70:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:B7:37:8A:B8:6A:2B:9D:C3:EF:D3:03:13:68:C5:1F:1E:8D:AF
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:09:10:87:32:a1:34:b2:99:ff:f4:94:2c:62:5a:11:da:
f1:1f:78:42:40:17:cc:3a:18:1c:2d:e9:47:fc:04:a7:93:99:
f1:13:57:27:ec:0e:67:bb:16:73:f7:11:68:a6:49:3d:e8:c3:
3e:93:9f:0b:5e:47:5e:d1:85:bd:0b:15:94:e9:d6:20:ac:79:
91:cc:ba:3f:57:97:d1:cb:20:fc:0d:fb:74:ff:e2:67:e8:96:
1b:d7:bb:b1:8c:d4:e1:89:83:12:ac:8e:74:f6:13:2c:c7:67:
ed:7f:95:d6:d5:7b:5c:f5:dc:ec:0b:69:39:05:9b:53:79:e1:
00:f1:dd:6a:ca:48:f3:5e:3b:0e:5d:48:b0:fc:02:e4:6d:b4:
07:0a:4f:70:60:b1:cd:aa:0b:c7:f6:15:21:db:87:cb:cf:e7:
24:17:f7:b2:4a:a8:11:20:8d:5e:05:cf:78:39:6a:7d:28:da:
5d:05:5a:e4:ad:00:8e:18:34:dd:63:3e:12:ac:be:a9:d1:04:
0b:10:d0:eb:62:e5:b7:ff:2c:bc:ee:f1:00:2c:42:8a:41:64:
aa:71:17:9d:20:2c:c7:d4:d1:52:dc:4a:32:e2:4c:20:86:6c:
2e:e4:6b:c3:16:d1:b6:c8:c4:90:b7:20:e0:fb:32:c3:d0:bc:
2f:b5:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:47:14 2025 by rpki-client