Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: I5Sz20IQ5yIvbfYOoqThFPUjMt7TYdFZOklBeUBZ5+w=
Subject key identifier: 10:D3:A1:93:96:AF:66:F9:FA:2C:CF:87:02:B7:E1:2F:62:7F:76:73
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0197488C3B1E72E39772EF27ED54E1262D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 0451
Signing time: Sat 07 Jun 2025 04:00:39 +0000
Manifest this update: Sat 07 Jun 2025 04:00:39 +0000
Manifest next update: Sun 08 Jun 2025 04:00:39 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: wfGu0soFD41vrJpv9rc6KiBo1UuaZQyrj3Bp1h0m9wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:3b:1e:72:e3:97:72:ef:27:ed:54:e1:26:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Jun 7 04:00:39 2025 GMT
Not After : Jun 8 04:00:39 2025 GMT
Subject: CN=10d3a19396af66f9fa2ccf8702b7e12f627f7673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:c1:14:1c:bf:d2:a6:50:fb:a5:98:02:66:
0c:5b:df:83:ca:b7:2d:20:95:61:df:0b:8c:87:f1:
9d:c7:f5:52:ba:1f:ef:a6:c2:24:38:89:e1:3d:d1:
63:68:8e:d5:ff:43:c8:15:47:a2:18:31:81:e4:75:
8a:cc:c2:a0:58:19:a5:b4:fe:4d:7b:cd:d1:e0:83:
1e:4c:a3:e9:52:c5:0c:d4:65:39:f9:07:49:d0:4a:
5c:e8:12:40:de:47:30:ff:30:97:fb:9b:e1:82:75:
e5:ec:c2:8e:d2:04:c1:35:f7:89:09:0a:31:9c:d5:
69:04:7d:28:45:87:22:95:a8:f7:e6:1f:ed:b4:76:
44:95:48:25:e7:ce:76:31:e5:c5:d7:bf:94:41:4d:
62:5f:61:6c:c7:9f:c1:f6:db:8c:75:9b:3a:52:99:
fb:62:c0:30:ff:8b:fa:57:16:f4:03:35:d0:ee:ae:
8c:74:9c:d8:07:d9:29:76:6a:54:d3:34:5c:43:6b:
69:24:6d:8d:2f:1a:c9:2a:a5:d4:e3:a3:4f:bc:de:
09:35:ae:cf:03:9e:03:dd:f0:8d:52:c7:3b:bf:6a:
3b:c8:f4:32:9d:1f:c5:b7:5d:d9:68:ab:de:ce:3c:
da:e6:f5:7b:9c:27:24:97:3a:35:95:bd:61:f6:3f:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D3:A1:93:96:AF:66:F9:FA:2C:CF:87:02:B7:E1:2F:62:7F:76:73
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:24:45:32:9c:94:c4:c5:46:67:ca:af:51:7e:2d:a8:a6:
52:02:08:86:5f:ff:93:e5:77:41:98:60:21:57:a0:f1:d9:da:
42:a9:4f:ad:55:fa:d4:0a:4a:84:d8:0f:b2:ae:c2:b5:63:27:
b7:60:c5:9a:1c:72:ed:3f:00:78:5d:f8:5b:13:d5:06:fe:30:
c7:8d:b6:42:17:24:f1:64:73:ee:86:9c:55:0f:e5:bd:ca:d0:
b4:3d:cf:66:6b:d2:0a:ab:98:92:bb:c6:06:1f:a4:4d:0a:1d:
02:63:40:71:e0:f1:95:1e:b7:6d:e1:f6:82:8e:1b:8c:2c:4e:
cd:31:76:58:9c:87:75:8c:7d:21:73:27:5d:9a:62:0d:81:6d:
96:83:a7:f8:83:83:fc:26:28:89:3e:4c:1b:5f:19:ea:7c:d8:
fc:f9:77:8b:33:0a:b2:0d:91:63:55:59:fb:51:ab:d0:64:0a:
aa:dc:b5:72:be:a4:27:80:fd:db:4f:02:29:76:c9:15:4a:6a:
1e:8f:3b:bf:e3:63:79:70:bc:e7:65:f3:c3:b6:51:04:de:aa:
a9:09:5c:d3:12:3d:9f:cb:c5:cb:7f:cd:f9:7f:0b:2c:df:29:
25:bd:19:81:99:9b:54:53:48:53:5e:45:e7:ab:ba:85:14:2b:
91:6e:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:24 2025 by rpki-client