Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: VSBKe4fP3Hdk4LiMkiKeoxNu8LMOYm2TPSZzvs5sKPg=
Subject key identifier: 93:99:44:1B:17:B2:9C:9C:A4:A0:0E:EA:BB:48:36:5E:95:E8:23:EA
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01974C69E7F70824223656CA46D01FCB2520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 158B
Signing time: Sat 07 Jun 2025 22:01:38 +0000
Manifest this update: Sat 07 Jun 2025 22:01:38 +0000
Manifest next update: Sun 08 Jun 2025 22:01:38 +0000
Files and hashes: 1: Bb283EmMHgO869T1EeLsRpmJeYs.roa (hash: Nwt8fGBRV8sOt4t4VlNYBdMwpGMpgaO/PFcGpK3ITpc=)
2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: MgRoOiOs69xJyEcoq5tDXvRSVSX7L+Y1Pbsj+T1GMwM=)
4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:e7:f7:08:24:22:36:56:ca:46:d0:1f:cb:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jun 7 22:01:38 2025 GMT
Not After : Jun 8 22:01:38 2025 GMT
Subject: CN=9399441b17b29c9ca4a00eeabb48365e95e823ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:d0:16:ff:c1:4a:1b:78:19:69:81:04:f7:
f2:b6:f6:dd:6e:0b:fb:5d:27:15:8c:52:39:e6:48:
c3:88:4c:ac:66:43:16:4a:e7:a2:cc:85:0d:68:33:
05:c0:8b:47:c7:9e:1b:55:d9:11:51:0c:c8:66:c3:
09:ee:97:f6:ba:ec:c3:53:5d:c9:e2:9b:e8:9e:d1:
bc:fd:d4:ef:32:a7:21:28:8b:b1:f0:82:41:f6:ce:
0e:4f:9c:56:ed:48:38:c8:ef:ef:fb:30:71:d5:57:
94:58:50:43:a3:c4:38:68:c8:55:20:f2:74:6b:4c:
95:2c:cf:88:d2:fd:92:89:13:7a:27:74:1e:87:e0:
99:a8:1f:e5:ee:7f:d9:ed:86:07:d0:b0:81:1e:55:
92:5b:91:e5:d7:ce:f3:bd:75:7d:bb:18:ff:ef:34:
c2:46:12:91:1e:27:bf:8a:bb:df:ee:ec:fe:55:d4:
9f:d1:75:c3:91:e1:be:21:2e:06:49:f4:b4:c8:cf:
00:5f:39:9e:03:7d:53:c6:cc:d5:2a:9c:2a:cd:1d:
6e:2a:ed:46:37:f7:68:b2:18:0a:f5:4f:3b:10:c8:
e7:95:6c:0f:f9:14:a6:7a:e2:6f:1f:60:2e:1f:2b:
53:9d:04:63:ec:14:82:cb:3b:b2:fd:42:81:d6:bf:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:99:44:1B:17:B2:9C:9C:A4:A0:0E:EA:BB:48:36:5E:95:E8:23:EA
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:a2:fc:51:ad:51:06:40:b8:58:14:d2:1b:15:c8:3c:75:
07:d2:b4:1b:87:84:2d:4e:5d:b5:1e:6e:cb:16:cc:9e:dd:71:
23:06:c6:d4:1b:fb:75:78:f7:b2:96:aa:07:09:0b:96:81:2c:
3c:2c:5f:1d:b3:a3:9f:78:d0:6a:a5:1e:11:a9:ef:51:17:80:
c1:07:0a:ae:70:a0:c9:d7:45:fc:76:f6:75:a8:1d:2c:aa:7b:
68:e7:3c:0c:f0:9a:d2:a1:0b:68:3e:d0:e4:14:c2:ff:bb:91:
b1:8e:19:ac:75:77:a3:47:5b:df:4d:36:50:82:8d:77:df:88:
24:f4:1a:81:f8:27:ff:35:9f:d4:1b:8c:4f:14:c7:e0:19:42:
45:66:3a:72:5d:e3:fe:e0:f3:8b:6d:f0:19:b7:0c:b2:26:7f:
31:01:73:9d:fe:72:eb:16:45:da:3c:f2:72:92:2f:68:5a:76:
f4:01:85:cf:ae:01:7a:e5:19:48:3b:4f:d9:b1:ae:e1:9e:26:
8d:46:00:0a:db:d0:7b:9a:3c:d4:f7:14:ea:95:d2:f1:e9:ab:
0f:51:61:6e:68:25:6b:b3:10:95:6f:2d:1b:a3:02:d7:1c:f1:
a1:c1:3f:c7:22:23:98:fd:83:c0:dd:45:6d:9c:98:0f:7f:e7:
84:73:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:28 2025 by rpki-client