Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: SjqmDJC9ylgR6XrSWGWdk/MGoBlxP/Mmsd+ZL6S2N3g=
Subject key identifier: 24:FD:FF:38:E7:9F:26:0C:9F:CB:F0:23:F9:8D:AC:0E:2E:38:FB:3E
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0197B89003694D40EE9F6C137ADE203A8CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 12CE
Signing time: Sat 28 Jun 2025 22:02:15 +0000
Manifest this update: Sat 28 Jun 2025 22:02:15 +0000
Manifest next update: Sun 29 Jun 2025 22:02:15 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: b926qlNU+gPkmlQGZi93h38qNSVkOxWJyo35BIiAMxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:03:69:4d:40:ee:9f:6c:13:7a:de:20:3a:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jun 28 22:02:15 2025 GMT
Not After : Jun 29 22:02:15 2025 GMT
Subject: CN=24fdff38e79f260c9fcbf023f98dac0e2e38fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:24:bc:c1:df:9c:9e:cf:55:66:ac:e9:bc:
2a:e5:47:62:e9:82:46:18:fd:ff:24:b3:42:54:ab:
bc:ad:6d:94:ea:56:97:e0:8c:50:d1:18:0c:27:1d:
2c:03:7e:41:d3:cf:d1:e7:ed:79:4d:7e:52:75:0b:
48:f9:6a:7c:aa:41:5c:a1:c8:09:03:04:1c:24:f3:
7e:3a:10:dc:d2:92:7d:6b:3c:6c:37:da:d0:d9:93:
74:1b:56:c4:9f:39:80:9c:f5:1f:b5:00:43:0d:d0:
2a:44:3c:76:bf:50:56:dd:2e:14:6b:32:88:51:8a:
23:0b:37:41:68:85:01:e4:46:d2:2d:0d:90:3e:69:
31:b1:4d:4b:4f:31:ce:ec:a2:c9:71:11:77:6e:ce:
dd:fc:a7:e4:cd:0b:00:8b:5c:03:7a:ae:5f:25:a0:
e6:18:81:c7:ab:90:0e:11:5e:5d:8f:d8:df:d2:4e:
b4:71:eb:b3:3e:ee:d9:e0:31:a7:cd:bb:1f:fc:11:
d8:7a:ca:87:5c:2a:1b:99:7e:c4:bd:7a:9c:75:0d:
eb:85:60:38:f9:af:c8:6b:dc:f7:53:5e:5b:d0:46:
61:2e:9b:44:67:dd:e7:b9:bf:54:f1:59:a6:fe:7b:
16:09:11:03:ef:9c:7a:41:c1:72:36:52:03:ba:41:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:FF:38:E7:9F:26:0C:9F:CB:F0:23:F9:8D:AC:0E:2E:38:FB:3E
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:c9:d1:be:6a:39:b4:61:5e:c3:e1:aa:e0:34:a3:7b:ea:
a1:d8:56:f4:4e:41:06:de:f1:5e:46:25:21:f6:f7:b9:22:09:
f7:fa:32:15:50:d1:f5:6c:0a:2f:93:53:26:e6:34:24:47:75:
65:d5:b3:6e:a2:df:da:7c:8d:f5:e6:5b:7f:b2:87:cc:4c:df:
19:61:fe:a7:89:60:1c:98:8b:38:f3:f5:33:1d:c6:b0:da:b2:
77:95:44:d5:de:e6:e7:b9:a1:0a:d5:55:6a:96:1c:93:12:64:
1f:4b:2f:c2:af:b4:66:bb:e0:69:e2:c3:22:c5:9c:60:98:f7:
c8:f9:97:27:09:c7:26:71:1b:b8:cc:8e:d7:6f:1f:95:11:6d:
4e:05:d1:35:20:cc:d5:8e:10:fa:72:a3:1f:25:81:55:b5:ed:
b4:68:62:81:e0:1e:bd:08:82:7c:e2:fa:cd:55:65:1d:bc:2b:
7f:95:36:5e:0d:9c:68:b2:21:58:e9:1c:4b:79:e2:93:6c:51:
72:f9:f0:2e:89:60:58:d4:42:53:1e:4e:8a:13:eb:43:54:4a:
ff:fe:fc:0b:ca:10:7f:0b:09:ba:22:ec:0b:0a:65:ce:ad:17:
08:45:b7:09:bd:cf:84:be:1a:8a:5b:59:90:f6:e0:88:6f:1d:
2e:0f:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:42 2025 by rpki-client