Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: L26dQhvxbVRMs0YTUuGOaTPanb1swu8NLgqhSSgfYDs=
Subject key identifier: 52:B7:E4:40:5F:B2:10:29:AD:65:E5:AB:FF:9E:02:70:A0:53:D8:3A
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019748C3359722D948EFD4FC0364E19DA326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0C5D
Signing time: Sat 07 Jun 2025 05:00:42 +0000
Manifest this update: Sat 07 Jun 2025 05:00:42 +0000
Manifest next update: Sun 08 Jun 2025 05:00:42 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: nhuordgpqaZQXXl6PdsOCtXM9suk0hp+tX7/P89tsXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:35:97:22:d9:48:ef:d4:fc:03:64:e1:9d:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Jun 7 05:00:42 2025 GMT
Not After : Jun 8 05:00:42 2025 GMT
Subject: CN=52b7e4405fb21029ad65e5abff9e0270a053d83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:1e:45:4e:50:96:84:f5:e0:04:ca:82:33:
2f:85:9d:fa:28:bb:29:51:4b:f1:25:51:c8:78:46:
49:3f:24:f4:d5:f8:0c:f2:9c:51:3e:9e:a8:fc:60:
bf:8a:52:5d:8d:14:8c:86:59:8c:fe:9e:a4:6a:89:
b6:ee:e7:a2:13:29:3f:88:d2:b6:fc:3d:b6:40:5e:
dd:0e:94:ca:40:ab:44:71:49:3f:0f:e2:76:9a:90:
01:6a:a3:6c:3f:6e:bd:da:2b:ea:90:f7:ad:31:8f:
0a:30:09:c3:7f:25:1c:da:fb:f4:2b:f3:e8:71:ad:
2e:3f:a8:5c:84:74:7b:bc:3a:33:f5:db:15:b0:a9:
c4:f5:a4:7c:1d:af:48:11:4b:82:3a:e0:60:af:32:
8f:4e:13:12:1f:f0:5f:28:56:4c:30:7c:2e:4b:1b:
71:3d:11:7d:86:fc:17:fd:e8:59:79:07:b6:ec:b3:
8c:71:27:47:0c:90:aa:8d:53:ce:e5:ab:5f:bd:00:
0e:ea:63:1e:5f:3d:b0:37:32:ea:3a:1d:f5:55:54:
6c:2f:de:63:99:c2:a1:72:64:47:25:b5:d3:77:c0:
53:96:39:47:23:4c:19:f9:0c:c8:f6:a5:a9:1b:86:
ec:0a:14:d5:b4:f3:61:22:1c:21:6a:53:f9:9b:06:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:E4:40:5F:B2:10:29:AD:65:E5:AB:FF:9E:02:70:A0:53:D8:3A
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:24:ff:5d:88:ee:af:db:93:d4:3f:15:94:3c:53:d9:9a:
df:18:b8:13:b0:b8:cb:34:c5:43:b1:9a:fd:45:6c:05:7d:b2:
f2:9c:ea:19:3c:69:e8:03:3a:8e:e0:74:c7:91:a1:51:6d:4a:
48:4f:9d:12:49:0a:6f:47:7a:dd:8e:cc:ea:27:c3:7e:26:ca:
24:dd:e7:c5:7b:0a:c7:ce:ce:60:83:62:92:43:5e:65:95:6f:
d0:f8:45:44:7b:8f:01:24:89:92:18:f9:15:fd:31:b0:b9:8e:
c7:0f:23:f2:16:2a:16:a4:9b:58:07:19:54:2d:ef:b7:b4:fc:
15:1b:94:a1:15:12:39:6c:da:58:8d:ac:a1:76:a9:f4:ff:ef:
e6:4c:b6:90:10:b5:a1:0f:0b:2e:76:86:72:2d:13:39:fc:ff:
66:95:95:62:a1:f3:92:04:5e:11:42:7c:9b:77:6e:82:cf:21:
75:95:22:85:66:0b:ba:12:62:75:5a:f8:b0:27:b0:d6:22:f8:
20:e2:8b:4d:b8:e0:59:15:92:c5:00:62:93:8d:aa:00:ea:58:
7a:47:22:8f:05:96:6c:64:8b:34:7c:35:14:b7:06:2c:41:ce:
d2:2b:b0:fc:93:f5:1c:19:bd:c2:16:eb:05:cd:92:0d:e0:91:
7f:9c:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:12 2025 by rpki-client