Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 8KzXHNNFiCXhzMatyDJz/rcAiGLm6vBZAnXa+lUl/gY=
Subject key identifier: 8B:61:12:DF:0A:C4:12:E0:2B:04:6E:82:83:A3:65:58:08:A6:98:F6
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019745F9236A30D452F48AF0B2A4B66A27C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 16:00:44 +0000
Manifest this update: Fri 06 Jun 2025 16:00:44 +0000
Manifest next update: Sat 07 Jun 2025 16:00:44 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: WpoOCAOHWC6tGt4kYYD+qzpKTcNKSCRxDsShWZ4kZOw=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:23:6a:30:d4:52:f4:8a:f0:b2:a4:b6:6a:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Jun 6 16:00:44 2025 GMT
Not After : Jun 7 16:00:44 2025 GMT
Subject: CN=8b6112df0ac412e02b046e8283a3655808a698f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:7c:3b:aa:d4:4f:7c:41:65:fb:ea:b8:26:
b4:0f:df:f1:a1:77:ed:0d:ee:7f:62:d8:c0:15:28:
6a:5e:53:a2:d5:e0:c9:8f:f6:99:1f:7c:6a:d8:b5:
53:73:56:ed:32:4e:a1:14:74:1d:1c:0b:08:5b:91:
67:e1:ee:ab:9e:25:cd:8d:15:a4:c4:c2:b8:4d:7a:
92:8f:11:52:b0:df:36:01:0d:25:72:46:d7:6a:7d:
4e:45:34:76:79:05:cb:96:8d:cc:89:06:50:bf:7c:
00:00:66:28:e1:2b:18:58:21:6b:d2:1f:fa:a0:1c:
a4:99:3a:8f:46:2a:b8:c9:8d:10:36:37:34:a1:95:
10:cb:4f:7e:97:62:df:4c:43:48:cf:62:21:93:10:
9b:47:e5:1a:1c:98:37:5b:2e:bf:6b:5d:a1:d6:43:
41:3c:61:d5:00:6b:ef:ef:81:b9:e1:b3:04:f7:3b:
f8:74:63:b0:55:a1:cb:0a:55:3a:25:49:04:50:2f:
cd:50:b9:15:9e:0a:52:56:e3:c5:e1:48:29:cb:31:
23:2a:c7:ce:b7:95:2c:43:7d:70:21:6b:92:c4:1a:
fb:6e:77:cf:77:32:e0:5a:60:c1:09:1b:d9:5b:a6:
bc:f8:b9:3b:8d:f1:16:28:91:58:cc:1e:ad:c7:08:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:12:DF:0A:C4:12:E0:2B:04:6E:82:83:A3:65:58:08:A6:98:F6
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6a:eb:ed:0a:0b:b7:d2:02:5c:5c:14:1f:6b:3d:01:3c:4f:
c2:89:b3:ad:b7:6d:06:bb:5f:78:7f:36:db:37:50:87:c0:98:
2a:eb:7e:66:ca:15:c1:ee:da:d6:e6:ae:04:4b:b4:0a:56:e7:
7a:ab:fa:2a:c0:c4:d3:9b:5e:6e:bc:ac:14:0c:9f:a0:2f:b0:
0b:61:0c:0c:95:d3:74:29:88:ed:20:8e:60:40:cb:64:52:b8:
ea:a5:e0:51:18:cf:6b:12:3b:e2:28:54:e8:ad:c3:ff:d0:1d:
34:c0:ff:1d:32:ee:22:c8:9a:99:38:d9:ca:b0:2e:33:21:9a:
2f:8b:b4:ba:43:03:05:b8:c0:76:e8:22:4d:e0:3d:e0:df:3d:
b5:1f:99:8d:7a:b2:b1:c5:1f:a2:26:2e:f7:23:12:cb:ae:10:
b9:0b:bb:c0:85:03:f2:39:88:14:dd:6c:98:f9:73:85:38:fa:
df:e2:1b:d9:85:85:cd:9e:97:a5:b3:f7:ae:ce:2e:0f:36:c6:
bb:52:86:1f:33:38:a0:5f:bc:44:4f:7c:d9:8b:d5:9d:1b:8d:
f0:c0:2a:57:c7:57:dc:19:47:50:5a:d6:d1:f7:25:f4:1b:c3:
76:fe:b9:29:c0:16:39:4e:d3:d5:c3:dd:d7:6d:1a:54:81:4b:
50:92:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:36:36 2025 by rpki-client