Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: QcgJpGhrKc00OMokKUsejQ1XPlhdtEQszCS9fC9G3BE=
Subject key identifier: 79:BD:A5:5E:A9:E8:7A:03:15:43:C4:3E:90:CC:53:7D:8E:9B:87:5F
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 01974FA126699C61134EB806BCC10DD9E7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 04CC
Signing time: Sun 08 Jun 2025 13:00:50 +0000
Manifest this update: Sun 08 Jun 2025 13:00:50 +0000
Manifest next update: Mon 09 Jun 2025 13:00:50 +0000
Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: pKt2vEOzQX2qtXWgTyBjbK8AAabuX1C5NlvHQ+GQWcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:26:69:9c:61:13:4e:b8:06:bc:c1:0d:d9:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Jun 8 13:00:50 2025 GMT
Not After : Jun 9 13:00:50 2025 GMT
Subject: CN=79bda55ea9e87a031543c43e90cc537d8e9b875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:b9:98:d0:31:d8:20:9a:81:83:d0:8a:1e:
48:b0:d9:9c:c4:a1:77:0b:0e:0a:81:f2:99:2a:44:
58:12:5b:10:d9:4b:50:94:e1:44:a5:98:a5:f6:51:
cd:a9:31:f2:94:03:fc:0a:30:2a:75:72:90:a1:0f:
1f:95:bb:28:a5:0d:28:1d:4c:53:c5:24:32:64:32:
be:0c:59:7b:5c:79:38:4e:e6:6f:eb:8b:69:78:b0:
34:7b:50:1b:ed:b9:d9:93:a1:1b:7d:02:ab:22:5f:
31:8a:53:88:13:73:4f:7e:a6:aa:6d:72:29:45:17:
e8:0b:de:30:fa:bf:02:29:25:bd:67:69:0d:81:32:
56:cf:6d:70:0c:3a:9a:32:bf:39:6a:35:ca:5d:84:
88:7f:f6:80:d1:11:5b:9f:5f:ab:90:16:1b:4c:29:
29:f9:eb:21:c9:65:b4:72:6b:bf:31:04:3c:cd:41:
42:28:f0:ac:7c:ff:9b:72:2b:d1:14:4d:45:31:58:
3b:17:b1:91:97:43:c0:33:f8:d3:c4:63:ee:25:f4:
5c:1e:84:c4:27:e0:40:4d:3c:a8:6b:e7:ea:f8:22:
76:53:17:ea:7f:d5:d3:85:c3:f9:81:17:7c:0f:3d:
96:aa:2d:63:39:71:83:e1:0c:d5:cd:f3:55:47:b0:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:A5:5E:A9:E8:7A:03:15:43:C4:3E:90:CC:53:7D:8E:9B:87:5F
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:c5:a5:9b:da:81:42:04:5d:38:4a:2a:72:1c:a3:64:16:
6b:4e:62:7b:17:f8:cd:8c:a1:30:30:ee:48:8b:4a:8d:21:c2:
91:7e:68:dc:29:b3:67:42:ca:98:18:7e:64:6c:47:bf:73:65:
66:1f:9e:37:7a:bc:4b:06:91:d0:7f:a4:2c:aa:48:09:b9:27:
8e:f4:9c:9c:f7:01:e6:eb:ab:ad:e3:c0:7d:86:6b:52:50:95:
e8:35:e6:5e:0a:36:00:5e:f4:86:6e:43:89:09:40:d1:a8:64:
09:3a:a6:a5:e6:e1:c8:69:a5:3a:11:a7:14:bc:71:dc:59:bc:
49:dc:4b:02:04:27:6d:c3:3c:94:5a:3f:4e:38:c4:6a:67:89:
d5:d9:6e:07:0f:cc:3e:6e:b1:85:e7:d0:c0:a8:43:e8:21:d7:
48:64:cd:80:f7:79:ec:54:91:e6:e0:8b:9f:5f:7d:a6:28:60:
08:0f:ee:c5:88:b3:ff:7b:71:00:a2:20:30:9b:e4:bb:3f:e9:
f9:fb:3a:9b:67:04:ef:f4:d3:1b:01:e8:f8:d7:65:34:72:f1:
5e:23:60:30:93:38:73:b9:75:5d:8c:94:06:36:3c:de:43:4f:
91:da:93:bf:74:e2:6f:92:d4:15:21:1a:7a:4a:2c:6b:c8:d4:
b8:9a:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:34:59 2025 by rpki-client