
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: tDPW8jZN/JBop1jxdXcmx4cH0gXGUv51gFc9xzNusnY=
Subject key identifier: DB:61:B8:A6:35:39:9B:55:FE:BC:38:7A:E4:73:7D:76:4D:D0:13:80
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0197B7B301A375BC53CA00E1E4BBCDCEF997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 06CA
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: wTX7UBdL6LqTKyb6wsm9RDue9zBtyRCGGXnzjcLgojo=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:01:a3:75:bc:53:ca:00:e1:e4:bb:cd:ce:f9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=db61b8a635399b55febc387ae4737d764dd01380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:ce:28:92:b7:5a:c8:4e:f4:5f:4b:60:3e:
cf:0d:bb:94:c9:63:36:30:12:e4:dc:e2:47:09:3b:
d2:14:c3:44:94:49:ee:90:b4:8c:29:14:c9:48:9b:
88:33:f1:d2:04:fb:e3:c8:c5:68:c0:71:04:70:2b:
35:2c:9e:01:be:33:63:bb:bf:45:94:10:dc:de:de:
2b:62:e9:57:42:00:6d:77:86:9b:79:68:e8:91:04:
44:8a:94:c6:35:5a:f2:d2:e3:e4:33:53:65:36:2d:
89:b4:c0:27:b9:71:aa:26:a2:58:ed:7f:27:17:f4:
8c:27:2c:8f:8c:11:8c:e9:8f:9e:6d:20:4e:4c:05:
f1:ab:3f:d4:0d:54:c5:7b:3a:c8:b5:3c:49:f9:3a:
72:18:9d:ca:24:bb:65:22:a6:e5:8f:b8:c5:85:1b:
0a:58:c4:c1:79:38:18:0f:03:87:ae:e2:46:70:0b:
4c:2d:7d:4c:a9:62:31:da:35:23:80:2c:7d:da:95:
70:40:d2:cb:56:22:e7:03:71:e4:16:49:b8:b3:0a:
22:86:45:95:95:7b:2c:48:5e:5c:e9:59:b0:cc:92:
f9:08:9d:71:ee:5e:e8:e4:fa:87:df:43:5f:fb:3e:
31:4a:9e:04:0f:cb:22:0a:9b:40:dd:df:63:45:fc:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:B8:A6:35:39:9B:55:FE:BC:38:7A:E4:73:7D:76:4D:D0:13:80
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:4a:b5:98:45:5e:30:e0:8a:8a:84:19:9f:43:d3:b9:62:
fb:92:e1:cb:87:c5:24:93:66:af:10:1e:fe:d0:1f:3e:c9:5f:
9d:63:4d:e0:0d:e2:eb:93:99:69:da:21:ca:51:7e:cf:10:13:
52:7f:cb:b0:f2:c6:a0:ab:4d:da:8d:d5:b0:81:3a:0b:d8:a2:
41:a7:8a:fe:44:80:91:23:e9:e7:9a:ae:59:7f:80:53:69:e7:
9a:4e:b6:dd:29:a2:2b:e2:a1:4f:a4:8d:9a:bc:8b:c0:8a:82:
09:60:65:ab:f9:e3:1d:2f:3d:63:5b:2a:6f:6d:f7:ef:35:d5:
f5:70:30:da:bc:26:15:6b:5b:36:46:09:c7:74:0b:91:c2:19:
01:9c:f5:70:df:4e:bc:19:a3:20:3c:a2:64:94:0a:7d:36:62:
c0:f0:71:a2:28:cf:c2:c2:26:5e:72:68:f6:b3:5d:4e:64:5e:
5f:6d:71:9a:be:28:cc:53:88:60:bc:c3:aa:a7:24:a3:c1:2a:
b9:81:fe:5d:32:7b:95:44:0e:95:02:9a:b3:65:6a:7b:cb:24:
88:78:b0:5d:38:94:81:78:fd:fb:4f:47:cf:49:54:21:00:41:
30:25:01:5b:51:17:be:c8:c8:ee:79:82:56:4c:63:ad:4d:15:
49:11:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:24 2025 by rpki-client