Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File: l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier: Rt+Tiar/3VFaGx0zuIhv1vjPhnoqQMYzUeahLfxzRXg=
Subject key identifier: 12:32:92:4D:56:7F:5F:EC:A8:49:17:42:2F:66:80:A2:39:6A:30:D9
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 0197B70EFED52AF41E785FFE6D93C7EC17EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number: 0CE8
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: WOmDR0gkDYsuG9Soke-w2reYe2g.roa (hash: qNbo7JrQ2MwJmZEbIhGXbA+hRsU9tW8mGt+CExNZuso=)
2: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: FNAtSgrexfYz9v+s6NAQUtqM4A3xQSGi2o8tp+2IU9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fe:d5:2a:f4:1e:78:5f:fe:6d:93:c7:ec:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=1232924d567f5feca84917422f6680a2396a30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:f9:e1:20:bd:51:ca:40:fe:fc:3f:9a:74:
da:86:7d:1e:44:f5:a0:e8:5c:d5:0f:f3:90:86:3f:
66:e6:dc:1d:34:d7:ee:15:1b:7f:18:c9:2c:c3:78:
67:02:8d:27:ec:8d:f5:91:9e:49:2f:ec:a3:b8:62:
e5:99:c7:e8:21:5c:05:2c:6b:57:71:5d:19:5f:53:
b7:b1:6e:2d:a2:56:ab:64:94:09:ed:16:52:b6:94:
49:dc:f7:06:04:28:3f:5c:b8:96:3b:f4:78:fd:e3:
9e:42:a3:51:28:a4:a3:cf:0a:57:bf:00:c5:86:a8:
7c:d6:90:83:41:5e:64:5a:f8:33:4d:3a:25:fc:78:
b8:eb:cf:fe:84:f7:d7:df:ae:33:79:54:e3:fd:a1:
2c:88:68:11:f1:8d:f4:b0:e5:39:18:f1:cd:43:c9:
7f:d9:a6:5f:bf:56:95:f4:42:92:16:81:b5:87:49:
52:26:90:18:da:9c:26:a2:a9:77:d5:26:eb:d2:d5:
9b:a9:be:59:4e:13:aa:1a:aa:24:30:7c:cd:c4:4d:
9d:84:b4:fd:8a:c4:3e:40:aa:10:3c:dc:70:8b:95:
a4:bd:33:13:c4:bf:32:be:7b:9e:16:fa:34:bb:7f:
3c:56:24:17:43:65:ad:b7:08:d4:96:84:fc:c3:6c:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:92:4D:56:7F:5F:EC:A8:49:17:42:2F:66:80:A2:39:6A:30:D9
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:22:6b:a3:55:a5:33:19:43:90:87:6f:d9:9b:c8:e0:12:
20:e0:48:9b:dd:ce:58:d4:b8:bd:e3:da:04:1d:da:3a:47:8e:
b7:0d:42:a3:35:fd:4d:3c:f9:fb:43:14:60:90:d7:46:e2:76:
c1:39:18:78:18:6a:2d:11:4a:5a:ca:fa:8a:6b:9b:d4:f7:85:
38:65:fe:40:7b:a6:a0:0c:4d:ef:e7:b9:dc:52:7a:f5:27:a6:
b6:24:fe:a5:d0:df:f7:38:0d:eb:7c:d1:51:52:6a:1c:9c:9d:
76:cd:8d:b8:c2:2d:95:f3:fb:2d:b2:78:a0:00:47:63:cd:1e:
3d:df:7f:77:c5:df:dc:02:c9:35:29:1b:5b:ee:35:b8:ba:d7:
b8:69:74:c3:1a:bc:5c:f8:26:fa:6a:df:3c:e5:02:68:4c:cf:
54:3d:a1:29:6f:3f:55:e3:c8:81:c5:b3:93:94:0c:b9:4f:48:
bb:56:f2:91:a4:3e:be:66:84:32:6d:3d:ec:45:05:98:e1:94:
c7:bb:25:0f:bd:26:4d:a1:22:0c:40:f6:70:87:2b:98:c6:ca:
67:88:d1:4f:42:02:a8:fe:c7:7c:23:86:dc:ea:04:6b:b5:36:
68:2d:da:f2:96:59:c5:df:79:13:0c:2f:a7:1d:53:a7:e0:2a:
28:0d:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:20 2025 by rpki-client