Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: r89AFF5SjPlbJkcOKXg8KCgJjaYbc4Of+A9zXDNTdJQ=
Subject key identifier: EE:EB:E4:42:68:4B:DB:A0:F7:07:88:87:B9:E6:5E:96:BC:AC:5A:AF
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 0197B6D74AAA1550B64D53387CC36E2547C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0EC9
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: q23i2BTsRlhIlIFjwXaOtqQa9C8mvWWvW8REdHdOhI0=)
2: oEKdXw4w7e_1s4z2e7tOx4lNx0c.roa (hash: YjHL6/typreJGiDTssJHq0i4gZ1mztxzHYUdqtYA8ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4a:aa:15:50:b6:4d:53:38:7c:c3:6e:25:47:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=eeebe442684bdba0f7078887b9e65e96bcac5aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:8c:8e:ec:b1:a0:95:16:0f:61:3f:be:52:
e3:c4:9b:9b:15:cd:0d:9f:26:04:d3:2d:ce:ea:9f:
36:f6:31:46:9f:ab:95:8d:2e:2e:8d:db:77:27:5d:
cd:28:07:db:bd:a2:ff:a1:2d:e3:58:ef:37:35:a2:
b2:51:7b:5a:0f:db:41:69:01:2c:52:67:c1:09:5d:
04:94:ac:38:a3:5a:12:d8:a5:8a:cb:43:69:9b:48:
3d:cc:de:15:94:e7:72:d5:82:79:cb:cb:ff:c9:50:
e9:38:55:dd:db:1e:45:78:69:97:fa:8d:f8:d3:b4:
43:f1:3b:91:9b:6b:a7:f3:71:42:d3:7f:bd:72:89:
0b:09:ed:ed:54:83:3b:6e:c3:f0:b8:ee:6a:9a:a6:
22:d2:28:ac:b0:1e:fa:40:27:69:41:b9:3b:7e:1a:
0e:f2:b7:58:35:df:87:3c:2c:f0:9a:0a:83:70:53:
08:c2:d3:04:f8:7b:fe:31:a7:a6:eb:8a:12:40:07:
ca:3c:7c:89:a0:98:c6:54:f1:49:67:64:6e:3d:b9:
dd:54:e8:ba:7d:46:5e:49:43:a9:a0:2f:c2:e0:9d:
48:88:0b:65:c4:0c:47:42:7c:09:3f:54:c2:18:fe:
2e:f3:3b:1c:27:89:22:fe:bc:31:6b:d7:d2:72:b7:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:E4:42:68:4B:DB:A0:F7:07:88:87:B9:E6:5E:96:BC:AC:5A:AF
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:1a:2d:d0:11:0e:17:cc:af:11:8a:21:84:ac:9b:bd:73:
89:d2:93:73:aa:35:69:d4:9e:7b:2c:27:99:03:9e:1f:68:ee:
dd:62:4d:fe:ac:23:5f:88:33:cb:7d:52:ca:e8:84:c3:42:47:
d7:e3:bd:c2:e9:a4:8d:79:9c:00:5b:fa:d6:f0:44:b0:8b:4b:
fe:31:6d:e5:3f:42:81:76:e5:15:83:5d:8e:7e:52:a9:84:75:
75:b4:bd:0f:65:0f:af:45:c6:d7:ad:c0:ff:8f:a8:3a:78:fb:
88:46:06:5d:55:8f:86:f5:11:a7:50:5b:ab:ae:6a:8c:38:ce:
92:87:aa:4a:e2:31:ac:ab:a8:50:ca:8f:e6:1c:8f:90:08:6d:
55:dc:b2:14:a3:a8:bc:7c:e7:c9:bb:31:1c:dd:3e:9e:64:aa:
1c:a4:ac:c4:73:7f:d4:30:ad:1d:6e:72:50:df:68:23:c5:4a:
a1:f3:54:62:b6:9f:f0:4c:6d:11:29:9d:42:00:c1:43:07:8d:
4b:f6:f1:13:bb:33:99:c6:83:30:c4:ce:58:a3:59:11:fe:28:
22:1b:42:25:d1:f9:5d:2d:62:58:b7:db:a9:13:3c:2b:c3:64:
26:d2:2a:b3:7f:a5:6a:5f:46:5d:10:35:6f:c9:c7:b8:bc:4e:
41:41:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:29 2025 by rpki-client