Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: yB9vOBqZuxH9qWyOkhw0AnAWoVvcj7RJjLXs0gi2tLc=
Subject key identifier: 0C:C2:B1:C1:0F:4A:3E:AF:2C:6B:81:A2:A8:97:0A:1C:DD:A9:8D:B4
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0197477995B65CF615F42E9BE46D0695E81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0C5D
Signing time: Fri 06 Jun 2025 23:00:39 +0000
Manifest this update: Fri 06 Jun 2025 23:00:39 +0000
Manifest next update: Sat 07 Jun 2025 23:00:39 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: i4JfLYdNDGlmGk+oR+mxhNh9am6EY/CwKe8gMsKKGxk=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:95:b6:5c:f6:15:f4:2e:9b:e4:6d:06:95:e8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jun 6 23:00:39 2025 GMT
Not After : Jun 7 23:00:39 2025 GMT
Subject: CN=0cc2b1c10f4a3eaf2c6b81a2a8970a1cdda98db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:f8:cd:41:4b:93:2d:bb:33:3d:87:1f:d9:
96:61:36:9f:d1:20:9c:45:3b:3d:e9:e9:6d:f5:9a:
d4:08:7c:8f:e3:58:81:7b:75:61:50:05:17:4f:c5:
f3:19:a8:f4:a1:fa:47:df:10:18:4a:a7:28:d0:3a:
92:d5:da:51:5d:e2:98:2c:07:bf:ed:07:e9:9b:55:
6b:62:ac:5e:56:86:dd:cb:78:6f:1c:c6:67:5e:4f:
f3:cb:f4:7e:64:f9:0a:40:0e:07:f3:f5:f2:4b:a2:
55:3d:9a:9d:fb:23:62:94:df:08:cb:42:07:aa:8c:
e1:9c:49:b9:66:9f:b3:3d:0e:d9:46:62:91:44:2a:
29:05:05:0b:0e:e3:b1:96:66:57:fe:5d:80:33:a7:
88:08:a7:9c:de:0e:ad:f5:a8:d6:8a:ed:30:31:a0:
00:67:37:9f:11:65:bc:82:4a:c5:74:c6:19:89:35:
97:06:c6:2b:ea:1e:60:07:71:6e:09:cb:33:36:d3:
d7:b5:9f:98:69:59:01:8a:87:12:bb:7f:33:0e:ac:
41:e6:d6:63:b3:c3:25:ce:7e:7c:a4:e8:15:29:63:
34:5b:98:4b:f8:3e:ef:fb:8a:c8:ad:2d:cc:4e:fb:
85:aa:f0:a3:94:71:f5:3c:4a:96:c7:44:90:ed:86:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:B1:C1:0F:4A:3E:AF:2C:6B:81:A2:A8:97:0A:1C:DD:A9:8D:B4
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:3f:52:56:cd:61:48:a5:b7:a5:e6:b3:31:b4:bc:d0:c2:
2d:7a:5a:a8:05:23:e6:e5:fb:47:55:f1:13:78:41:ba:4b:fa:
fb:6e:50:41:d1:b6:16:e0:0d:f6:35:e2:38:9f:ee:2d:60:a4:
f8:f8:3b:e5:12:19:83:83:1c:64:be:b8:c9:a5:a7:41:7f:16:
ff:2e:f1:db:15:e8:44:28:d6:ed:f7:f5:8e:77:a1:54:51:1c:
3f:f1:ba:3b:da:0f:54:94:2c:99:e7:29:0e:9e:d7:b9:40:a8:
7e:3a:ed:80:03:98:08:0f:a7:db:76:d5:ff:26:14:92:fe:5d:
e0:b0:ba:71:a2:ff:4b:df:02:04:a7:66:af:8e:51:83:89:75:
b9:75:ba:47:5c:98:93:af:51:47:ae:bb:17:c8:ae:a5:f1:7e:
d8:3a:b1:bb:66:c8:dc:2b:94:1d:18:d8:1c:b6:06:db:b3:a9:
09:eb:54:03:94:fa:8d:76:4e:75:c4:ff:12:8e:49:b6:1b:c8:
ef:5d:c6:0c:4f:53:25:7a:cd:10:6b:52:fa:67:62:f7:ba:e8:
1b:7a:9d:85:b9:27:44:fc:1b:28:da:4e:64:14:93:fc:4b:a3:
66:26:98:9d:a2:06:99:c6:1f:a6:17:d3:2d:cb:93:f4:42:b4:
b6:37:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:31 2025 by rpki-client