Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: Jl/+wIpFiH03qEn3/aYs+O0hv5JhkY2lQPaX2n24AzY=
Subject key identifier: F5:68:5E:90:66:9D:AB:34:A9:A1:4A:9C:A7:D5:32:30:E3:6A:B5:5F
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 01974E575B485776EB88C4F9368E480349BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 1281
Signing time: Sun 08 Jun 2025 07:00:37 +0000
Manifest this update: Sun 08 Jun 2025 07:00:37 +0000
Manifest next update: Mon 09 Jun 2025 07:00:37 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: 3KzEruKkZQh3k3vcS33zz0Us+GxlZeAnzgpaJCiDKng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:5b:48:57:76:eb:88:c4:f9:36:8e:48:03:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jun 8 07:00:37 2025 GMT
Not After : Jun 9 07:00:37 2025 GMT
Subject: CN=f5685e90669dab34a9a14a9ca7d53230e36ab55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:f4:65:1b:c6:55:08:6d:a7:e3:a7:c0:dd:
b5:55:f4:f6:90:de:f1:1a:a8:24:59:0f:eb:79:3a:
c5:f6:a0:cc:7a:85:0f:5c:3f:48:16:04:fa:08:64:
23:14:28:f3:a9:a9:b0:95:e7:33:0d:e3:f6:95:e0:
2c:a2:4a:5e:39:36:58:ef:56:3a:0f:03:a6:2c:68:
23:39:b3:09:f5:c1:1d:17:e2:5a:f9:cc:41:9f:a3:
6d:2e:a3:3e:93:1c:a8:a5:9b:ec:39:57:fe:a1:22:
de:c7:da:9c:68:47:6c:84:a0:30:68:83:e9:cf:c5:
c4:46:fd:92:56:1c:ed:48:fc:bb:50:e4:f1:2a:95:
1b:f7:6e:fa:2d:11:32:b9:23:64:42:f7:94:dc:e7:
b5:b7:e9:70:f6:90:2d:df:1c:96:bc:fd:86:a9:c3:
e8:17:b5:fd:ca:18:aa:75:12:d4:cf:aa:3b:26:6f:
7b:58:b4:9c:d9:b3:67:89:0e:95:1a:97:0e:1a:8a:
56:3f:2c:77:6b:12:76:4c:45:fb:bd:2a:c7:4b:73:
b4:25:ad:34:30:c3:33:e0:c6:08:a1:67:c5:c7:ec:
17:0d:fd:a6:d4:57:ce:9d:1b:1e:58:a7:ea:ab:aa:
61:2f:dc:dc:ff:3c:7d:a0:77:d7:d0:d5:af:d4:43:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:5E:90:66:9D:AB:34:A9:A1:4A:9C:A7:D5:32:30:E3:6A:B5:5F
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:76:9f:a9:2d:91:66:46:9c:04:52:2d:63:6a:e2:cf:82:94:
06:e5:60:a9:41:85:a7:81:62:01:88:39:16:e2:9b:3d:39:05:
34:f3:79:56:78:bb:5b:16:88:28:6f:a9:5a:3e:4b:d8:97:1b:
16:d3:c7:ea:d0:a6:36:76:d7:ed:cf:3f:57:6e:1f:70:4c:9b:
48:81:1f:a4:3c:87:d7:82:12:66:af:68:20:2f:ca:67:03:56:
72:46:9d:84:3b:27:6e:d8:fe:8c:60:fa:f3:b8:b8:31:4c:b9:
e8:db:95:bb:53:1b:3c:5d:d4:6f:f6:1e:c4:c6:9e:fa:5d:f8:
7d:12:27:91:08:87:2e:29:90:d7:30:e2:46:2b:a5:48:8d:93:
f9:28:bd:69:ec:48:5f:4d:83:09:9b:64:4a:ef:1d:f7:ff:07:
2f:7a:cd:ce:77:3f:c4:e6:42:24:68:a8:95:61:d9:30:fc:b3:
62:d7:c5:a1:9b:6b:8f:be:9e:39:c8:4e:06:55:8c:6d:9e:8e:
50:60:bc:1c:d9:ed:d8:5e:a6:35:c2:3d:c6:fa:55:2f:c5:51:
61:36:06:71:36:fe:2e:ef:93:0d:28:41:de:6f:74:da:6d:be:
7f:90:b1:f4:58:c7:a1:10:9b:e7:c3:9f:9e:1a:2f:41:d9:f1:
b1:bd:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:37:49 2025 by rpki-client