Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: G8A90oGuxI4J77QL5vrGEmr3UuK2Ls735XI30k+V9SI=
Subject key identifier: 78:33:B2:CC:3A:B4:EA:5A:8F:4C:77:04:4A:24:FF:99:0A:B4:56:A4
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 0197B6D772751E530A933FE95866BBA0507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0F81
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: Rcxz/q7JBUK2JXxy9tulj9Uu7GOHLLEdvRU4Z0pbPWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:75:1e:53:0a:93:3f:e9:58:66:bb:a0:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=7833b2cc3ab4ea5a8f4c77044a24ff990ab456a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:cd:fa:e2:92:23:0d:5e:e2:6f:fd:80:b8:
4d:d1:1b:ae:c7:66:4b:23:2f:67:ea:eb:ca:2d:c5:
ff:0a:d6:b7:60:8a:65:c8:c9:9b:90:ec:bc:80:54:
3f:9c:3a:92:11:33:36:04:d1:de:90:a8:f0:5b:bb:
ad:a7:de:40:f4:b2:0d:67:6a:ba:df:9d:be:d8:37:
56:36:23:c0:07:eb:9f:e8:9b:93:7b:a3:64:8b:80:
8f:fe:e1:e3:7c:60:3c:83:33:c1:21:e0:69:ea:ef:
b3:53:a2:83:ed:6c:78:e4:5e:b6:9f:dc:8f:96:72:
4a:09:f2:24:80:df:34:c2:52:64:79:79:b2:19:09:
69:5b:f8:59:6c:23:2d:5b:b5:4d:e3:38:c4:04:f7:
37:c4:9d:8b:12:53:47:3b:12:eb:66:3e:0b:59:e4:
48:07:59:d2:55:99:57:18:43:ea:66:84:cd:51:bf:
cf:bb:5c:b1:49:99:9e:27:38:dc:ce:36:b7:1a:67:
df:aa:39:19:81:4d:e2:17:3b:4d:cf:c4:36:5e:20:
ed:02:04:93:9e:c5:e5:98:58:f9:f3:54:61:36:71:
32:4d:3b:b1:62:ea:b0:be:11:a4:00:89:dc:4b:7d:
7a:0d:3c:be:3f:18:d4:eb:6a:c7:62:42:e3:22:ef:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:B2:CC:3A:B4:EA:5A:8F:4C:77:04:4A:24:FF:99:0A:B4:56:A4
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:d1:a2:64:2c:82:6d:30:09:a8:27:f9:01:23:29:9b:27:21:
68:43:b0:72:1b:6b:ae:55:61:ef:3e:a9:49:21:02:9d:a7:b4:
fb:2a:5d:69:6d:01:62:6e:6a:0e:a7:7d:0c:66:c2:ea:96:c9:
af:b4:f4:b8:41:77:9f:f5:df:c6:43:86:b4:e0:45:05:7a:df:
70:58:9e:a0:cf:dc:46:7e:02:53:82:b2:82:4f:05:8e:27:29:
45:26:15:dd:85:0c:74:0b:23:84:f2:cc:a5:55:ea:79:60:4c:
d0:9d:cc:d8:ed:e5:7a:19:bc:30:32:d2:07:0e:51:e1:3b:0c:
07:e2:c1:49:81:d3:42:a8:88:d6:bc:de:37:27:48:8b:e7:9d:
2e:d4:3a:96:be:12:cc:04:32:63:c8:81:3f:65:36:61:b2:ed:
bb:9f:53:38:fa:a4:3c:dd:77:41:ef:a5:6e:0b:5b:f5:b1:57:
31:20:74:aa:30:91:90:40:80:08:90:55:1b:f2:2f:ab:70:97:
fc:9c:58:cd:b2:bd:2c:52:f5:97:8b:83:57:ff:33:16:4f:44:
43:4f:76:ab:72:a5:ec:26:73:8a:cf:2f:94:08:e1:d7:04:94:
69:ec:68:21:71:01:3d:6b:b1:fa:1b:61:75:cc:cf:7a:65:1a:
2b:c1:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:11 2025 by rpki-client