Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: UPA/JbizgHFpdVW1sxN5yVJBW7HhaWq0Mc1QPr+1Y6Q=
Subject key identifier: 0F:FC:D7:09:0B:23:12:B5:D3:A6:1C:A0:5B:8B:C8:9D:8D:CA:FA:54
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 0197D32A555318371A9BEE8667EFD4DB7879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0A79
Signing time: Fri 04 Jul 2025 02:00:56 +0000
Manifest this update: Fri 04 Jul 2025 02:00:56 +0000
Manifest next update: Sat 05 Jul 2025 02:00:56 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: ji6Zkfurx8fXqnQvb1Vh3f7xlsnW2CgtWCPkSNnfVMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:2a:55:53:18:37:1a:9b:ee:86:67:ef:d4:db:78:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jul 4 02:00:56 2025 GMT
Not After : Jul 5 02:00:56 2025 GMT
Subject: CN=0ffcd7090b2312b5d3a61ca05b8bc89d8dcafa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:f5:10:50:cc:5a:88:6e:aa:92:62:fb:61:
cd:db:ad:d8:c8:6d:cf:fd:ad:7d:c7:fa:e7:04:de:
29:4e:c2:28:62:1b:8f:8a:2a:dd:d5:c2:aa:92:f0:
0b:39:7a:84:df:c1:d6:b0:8d:54:52:b4:25:c9:87:
8f:18:1f:1b:74:b1:67:61:30:91:1b:da:ea:fe:7f:
16:f3:a4:d0:bf:89:be:d7:fb:8f:44:2a:fa:db:12:
53:58:5d:88:4c:da:7b:9e:3d:c3:6f:99:3a:77:61:
6d:e1:b8:53:d3:51:7a:4f:9e:2c:c3:dd:f0:b9:7d:
1a:52:dc:d4:f6:14:45:ab:a8:bd:61:2d:78:fb:43:
7e:53:9a:34:6c:c8:67:e2:9f:5c:9c:9d:a0:3e:85:
8e:7d:5f:44:e4:e5:fa:f9:4b:a1:31:5d:3b:b6:f5:
2c:fd:7e:ac:cf:09:17:8a:ab:fa:45:b1:5e:3b:d8:
f5:bd:43:63:c1:02:81:d8:0b:04:cc:e7:1c:e6:e5:
2a:2e:33:f0:6e:70:7f:51:6e:50:db:ef:20:b8:f8:
64:12:2a:eb:09:4c:80:80:e6:88:3d:14:16:9a:9a:
2c:b2:ae:9c:57:eb:ac:83:3f:b1:86:66:96:fb:95:
de:b8:e8:05:a2:9b:b8:4f:e9:ed:72:1e:c9:d2:35:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FC:D7:09:0B:23:12:B5:D3:A6:1C:A0:5B:8B:C8:9D:8D:CA:FA:54
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fe:5d:b7:9b:ba:0e:24:e5:b7:cd:37:95:56:81:ee:6d:d7:
24:31:87:16:08:05:09:ec:db:0d:bf:ab:0f:d2:02:6b:1f:e7:
32:61:9a:2d:84:89:cb:d5:c0:d4:c3:0c:1f:6e:86:00:db:18:
f0:b3:47:6e:7f:ef:69:2d:77:48:88:d1:c2:b9:95:dc:28:6a:
fa:97:53:14:5c:dd:53:27:22:e1:a8:d8:cb:f9:05:9b:a7:14:
61:84:9e:17:48:ae:1c:de:67:d3:e6:3c:73:d9:26:ce:36:a7:
82:68:e3:b5:0b:e9:f2:bf:94:62:9d:4a:a5:1c:09:98:cb:7a:
51:e6:92:22:ea:35:a7:a4:fe:67:8a:06:69:32:7f:60:d3:3c:
4e:bd:b1:97:2e:ad:f6:11:8e:ed:cc:be:c9:aa:cc:08:9e:23:
60:11:d0:a6:42:f2:13:95:ee:b0:18:11:ff:ae:de:c7:9b:ef:
bf:5b:ee:d4:a2:70:5a:50:5f:2a:a2:ae:f1:e2:ac:e5:6c:09:
a4:d4:9d:ae:49:27:a4:38:df:32:0c:8c:1c:b9:b9:9d:51:a1:
ce:c9:2f:d2:91:e3:0c:ba:6d:c7:40:e5:07:8e:ca:3e:0e:5e:
ca:27:9e:cd:7e:ea:c6:83:0e:11:4b:72:1b:09:61:10:c8:96:
95:f2:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:55:50 2025 by rpki-client