Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: plzXa3EGFLinviRvEfXEgrVZb34DX7VnTetN1ojLFns=
Subject key identifier: DD:C4:B4:B9:D3:B5:F0:69:63:92:D9:09:5D:B5:0A:BC:49:E3:CA:27
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 0197B632AA1B1A94E32696E0FD9915922AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 12C7
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: SgWnqUhtfmFjcgsgF1Wh3PVv8x/JrBi89VQNMZvh2as=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:aa:1b:1a:94:e3:26:96:e0:fd:99:15:92:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=ddc4b4b9d3b5f0696392d9095db50abc49e3ca27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:4d:5e:27:3c:21:15:5f:f0:26:ad:4f:54:
40:f3:0c:3b:0d:6b:d4:a3:99:b0:82:31:7e:f8:f0:
57:79:dc:9a:4f:06:64:23:2d:25:07:07:0c:5f:6e:
96:f8:f1:b4:55:a5:30:fe:05:ad:75:18:63:d9:78:
2f:1f:20:2e:07:93:33:8d:e7:94:a3:4a:d2:e0:97:
64:5b:7b:b5:b3:f8:5a:37:d3:7e:5c:72:14:fe:73:
48:25:2e:f2:76:72:c8:0f:f4:2d:f5:f6:d1:2a:89:
12:c6:cc:82:d8:4b:f0:aa:67:7b:fb:03:72:06:37:
86:ea:b6:88:a3:cf:e0:d5:5e:31:70:1b:3e:0f:c2:
f6:37:59:0b:59:76:33:89:25:10:17:ec:e1:08:f1:
57:6a:74:77:5a:79:be:9a:db:3e:cd:41:e6:0f:e8:
31:37:3e:f2:ec:c1:f0:cc:5a:80:06:eb:f0:b4:ab:
9a:87:66:a9:ee:1d:36:d5:3d:97:00:69:88:14:cd:
3f:0d:f0:bc:4b:bf:55:70:38:41:83:1b:33:f4:a7:
3a:90:44:85:e0:83:ea:43:26:a0:9d:61:46:0e:c7:
7a:f0:e4:cc:70:db:b8:df:4f:33:32:a5:35:f9:33:
6b:68:43:38:10:00:15:ed:4c:63:e9:6d:75:a8:d0:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:B4:B9:D3:B5:F0:69:63:92:D9:09:5D:B5:0A:BC:49:E3:CA:27
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7c:ef:36:fe:08:d2:46:2a:c5:bf:98:7a:8d:90:98:ca:97:
b6:26:11:3d:3a:be:09:74:0d:17:0d:48:1d:91:27:78:b0:63:
5a:46:de:b7:46:b4:4e:fa:e4:22:24:9f:49:0e:de:20:f5:67:
77:a9:b5:45:f3:0e:98:13:af:d8:38:be:0e:90:80:82:5c:36:
ff:5c:57:c2:cf:b9:ad:fb:55:0f:31:8f:70:45:c2:b6:13:45:
98:c6:69:6f:dd:28:ad:f4:64:bf:dd:69:ef:18:4b:0e:8d:29:
82:2a:04:01:0f:a0:51:e0:20:ac:f8:50:76:96:4c:84:35:49:
06:81:98:59:ce:e9:34:c0:34:5f:d1:17:09:cf:71:4d:c8:09:
01:80:62:20:9e:e4:62:bd:7e:71:5b:ac:40:13:95:ac:07:ff:
9d:d7:27:5d:53:34:78:86:44:fa:ee:2d:de:66:1b:f5:20:50:
90:ea:3b:1b:6c:12:c0:dc:9b:2b:8b:15:e4:86:bb:fe:c8:b3:
33:9c:d1:d6:34:b2:96:05:c4:bb:22:c4:1a:0a:d1:08:99:90:
78:a2:de:5d:96:92:a5:9b:66:49:11:c4:e3:04:63:f0:5a:52:
ab:86:20:9f:30:e9:03:11:76:1c:27:03:c3:8e:55:61:b0:94:
a6:51:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:42 2025 by rpki-client